Privacy Policy
This policy explains what information the Smart Product Table app ("the app") collects when a Shopify merchant installs it, how we use it, how long we keep it, and how it is deleted. "ShapeKode", "we" and "us" mean the developer of the app, which is responsible for the data described here. "You" means the merchant who installs the app.
In short: we store only what the app needs to show your product tables: your store's domain and access token, your table settings, a copy of the product details your tables use, and your plan status. We don't store information about your customers. When you uninstall, your login data is deleted at once, and everything else is erased 48 hours later.
1. Information we store
When you install and use the app, Shopify gives us access to certain store data. We store the following in our database:
- Store identity. Your store's Shopify domain (for example,
your-store.myshopify.com). - Authentication data. The access token and session details Shopify issues when you install the app (OAuth), including the permissions you granted. The app uses a store-level token and doesn't store staff account details.
- Table configurations. The tables you create and their settings: names, selected products or collections, columns, headings, layout, styling, search and filter options, quantity and ordering rules, and visibility settings.
- Product catalog snapshot. A copy of the product details your tables need so buyers can search, sort and filter quickly: product and variant IDs, titles, vendors, product types, prices, SKUs, availability, publish dates, and the IDs and titles of the collections those products belong to. This is your store's product information, not personal information. Buyers always see live prices and availability from Shopify.
- Plan status. Your current plan (Free, Pro or Business) and related subscription details confirmed by Shopify, such as a pending plan change, the end of a billing period or trial, whether the subscription is paused, and when the plan was last checked.
The app only requests the Shopify permissions it needs: reading products, reading published product listings, and setting up its storefront app proxy.
2. Information we don't store
- Customer data. We don't store your customers' names, email addresses, addresses, order history or any other customer information.
- Signed-in status. If a table is limited to logged-in customers, Shopify tells the app whether the visitor is signed in when the table loads. We use this only to decide whether to show the table, and we don't store it.
- Carts and orders. Items are added to the cart directly through your Shopify store. The app doesn't receive or store cart contents, orders or payment details.
- Quick Order and CSV input. SKUs and quantities that buyers type or upload are sent to our server only to look up matching products in the table. They aren't stored.
- Visitor addresses. To protect the service from abuse, we count requests per visitor using the IP address that Shopify forwards. These counters are kept in memory for about one minute and are never written to our database.
Our server logs record errors by type and don't include access tokens or customer data.
3. How we use information
We use the information above only to:
- authenticate your store and let you manage tables in the Shopify admin;
- display your product tables on your storefront and keep their product data up to date;
- work out which features your plan includes;
- keep the service secure and working, and respond when you contact support.
We don't sell or rent data, use it for advertising, or share it with anyone except the service providers listed below.
4. Service providers
We use these providers to run the app:
| Provider | Purpose |
|---|---|
| Shopify | The platform the app runs on. Shopify provides store, product and plan information through its APIs, delivers storefront requests through the app proxy, and handles all billing. |
| Hostinger | Provides the virtual private server (VPS) that runs the app and its PostgreSQL database for ShapeKode. |
We may also disclose information if required by law, or to protect the rights and safety of our users or the service.
5. Retention and deletion
We keep your data while the app is installed. When you uninstall, it's deleted as follows:
| Event | What happens |
|---|---|
| You uninstall the app | Your access token, sessions and confirmed plan are deleted immediately. Your tables are kept in case you reinstall. |
| You reinstall within 48 hours | Your tables are restored. Your store is on the Free plan until Shopify confirms a paid plan. |
| 48 hours after uninstall | Shopify sends the shop/redact request, and we erase all remaining data for your store, including tables, settings, the product snapshot and plan records. |
While the app is installed, product details are updated when products or collections change, and removed from the snapshot when they're deleted or no longer in a table. Deleting a table deletes its settings and product snapshot.
To recover from failures, we take a daily database backup and keep it for 14 days on the same access-restricted server, and our hosting provider keeps periodic backups of the whole server. Data erased from the live database may remain in these backups until they are replaced in the normal backup cycle.
6. Data requests and Shopify privacy webhooks
The app responds to Shopify's mandatory privacy webhooks:
customers/data_request— when a customer asks your store for their data. Because the app stores no customer data, there is nothing to return.customers/redact— when a customer asks your store to erase their data. There is nothing to erase.shop/redact— sent 48 hours after you uninstall. We erase all of your store's data, as described above.
For these purposes you are responsible for your customers' data as the store owner. If a customer contacts us directly, we'll refer them to you.
7. Security
All traffic to the app uses HTTPS. Storefront requests and webhooks must carry a valid Shopify signature, or they are rejected. Each store can only access its own data. Access tokens are kept on the server and never sent to browsers. No method of storage or transmission is perfectly secure, but we work to protect your data and will notify affected merchants of a breach as required by law.
8. Cookies and tracking
The app doesn't use analytics, advertising or tracking cookies, and it doesn't add tracking scripts to your storefront. This website doesn't use cookies or analytics either.
9. Your choices and rights
- You can delete any table at any time in the app.
- You can uninstall the app at any time, which starts the deletion described in section 5.
- You can ask us for a copy of your store's data, or ask us to correct or delete it, by emailing support@shapekode.com. Depending on where you live, you may have further rights under data protection law, and we'll honor requests that apply.
10. Changes to this policy
If we change how the app handles data, we'll update this page and its effective date. For significant changes, we'll also let installed merchants know in the app or by email.
11. Contact
Questions about this policy or your data: support@shapekode.com.