Privacy Policy

ShelfPin for Shopify · Last updated 12 August 2026

The short version. ShelfPin reads your store's locations and inventory levels so it can display them on your product pages. It does not collect any information about your customers — not their names, emails, addresses, orders, or browsing behaviour. It never writes to, changes, or deletes anything in your store.

Who this covers

This policy describes how ShelfPin ("we", "the app") handles data when installed on a Shopify store. It applies to the merchant who installs the app and to the store data the app reads.

What the app reads from your store

With your permission, granted at install, the app reads:

Locations — name, address, whether the location is active, whether it is a fulfillment service, and whether local pickup is enabled.
Inventory levels — the quantity available of a product variant at each location.
Products and variants — identifiers needed to match a product page to its stock.
Themes — read-only, solely to check which of your product templates contain the app's display block, so the app can tell you where it is and isn't installed.

These are read-only permissions. The app holds no permission to modify, create, or delete anything in your store.

What the app stores

Your store's domain.
Your locations and their settings, as listed above.
Cached inventory quantities, so product pages don't have to query Shopify on every view.
Your display preferences — heading text, whether to show exact quantities, the low-stock threshold, and which locations to show or hide.
An access token issued by Shopify, used to make the API requests above.

What the app does not collect

No customer or shopper personal data. The app does not receive, request, or store customer names, email addresses, postal addresses, phone numbers, payment details, order history, or account information.

No shopper tracking. The app sets no cookies on your storefront, runs no analytics, and does not build profiles of visitors. When a shopper views a product page, the display block asks our server which locations have that variant in stock. That request identifies the product variant and the store — nothing about the person viewing it.

As with any web server, routine request logs may briefly contain the IP address the request came from. These logs are operational, are not used to identify or profile anyone, are not combined with any other data, and are not shared.

Who else is involved

Shopify — the platform the app runs on and the source of all store data it reads.
Fly.io — hosts the application and its database, in the United States.

We do not sell, rent, or share your data with anyone else.

How long it is kept

Data is kept only while the app is installed. When you uninstall, Shopify notifies us and we delete your store's sessions immediately. Shopify sends a further deletion request 48 hours after uninstall, at which point all remaining data for your store — locations, cached inventory, and settings — is erased.

Because the app holds no customer data, requests from your customers to access or erase their personal information have nothing to return or delete. We respond to Shopify's mandatory customer data request and redaction webhooks confirming this.

Security

Data is transmitted over HTTPS and stored on an encrypted volume. Access tokens are held as server-side secrets and are never exposed to the storefront or included in any page a shopper loads.

Your choices

Uninstalling the app from your Shopify admin stops all data collection and begins deletion. You can also change or hide any location's display at any time from within the app.

Changes

If this policy changes materially, the date at the top will be updated. The app's data practices are deliberately narrow, and we do not intend to widen them.

Contact

Questions about this policy or about data handling: [email protected]