Privacy Policy for Keelhelm Shopify Apps

This notice explains what store and account data a Keelhelm app on the Shopify App Store processes to run, why, how long we keep it, and your rights. It is common to all of our Shopify apps. Each individual app also has its own short supplemental page listing the exact permissions it requests and any data handling specific to it; read both together. We don't sell your data and we don't use it for advertising.

What we process

• Store data (read-only, per granted scopes) — the orders, products, customers, inventory, and similar records the app reads through Shopify's API under the permissions you approve at install. Each app requests the least it needs and lists its exact permissions on its supplemental page; we never request more than an app uses. A few apps also request write permission for a specific, disclosed feature (for example, issuing store credit, restoring a backup, or managing a subscription contract) — where they do, that app's page says so.
• Install & account info — your shop domain, install date, and current plan, so the app knows which store it serves and which features are unlocked.
• Computed results — the metrics, notifications, reports, backups, credit balances, rules, or other outputs the app produces from your store data, stored so the app loads quickly and works as described.
• Operational logs — short-lived request and error logs used to keep the app reliable and to diagnose problems.
• Aggregate analytics — privacy-preserving, non-identifying usage metrics about the app and its site; we don't build advertising profiles from them.

Why we process it

We process store and account data to perform our contract with you — installing and running the app you added to your store. Operational logs and aggregate analytics rely on our legitimate interest in keeping the app reliable, secure, and improving over time. The full legal-bases explanation is in the Keelhelm Privacy Policy (Why we process it).

How long we keep it

We keep store data and computed results while the app is installed, so it keeps working, and delete or anonymize them on uninstall as described below; each app's supplemental page states any shorter or tier-based retention (for example, a history window on a free plan, or a backup-retention period). Operational logs roll off on a short window of about 30 days. Install and account info is kept while the app is installed and briefly after, for billing and support records. This sits under the Keelhelm Privacy Policy (How long we keep it).

Uninstalling and data deletion

When you uninstall a Keelhelm app, or when Shopify sends the mandatory customers/data_request, customers/redact, or shop/redact webhooks on your behalf, we act on them within the timeframe Shopify's developer requirements specify, deleting or anonymizing the corresponding data. You can also email us at any time to request deletion sooner.

Sub-processors

We rely on a small number of infrastructure providers — for hosting and compute, and for outbound email — to run our apps, and, for apps that store files (such as backups or exports), an object-storage provider. They process data only to provide those services to us, under confidentiality and data-protection terms. Where an individual app uses an additional sub-processor for a specific feature, that app's supplemental page names the category and purpose.

What we don't do

We don't sell or rent your store's data. We don't use it for advertising or profiling, and we don't use it to train any AI model — unless an app's supplemental page expressly says a feature uses AI and describes it, and even then your data is not used to train models. We don't install advertising or tracking pixels on your storefront, and we don't add you to a newsletter unless you explicitly opt in.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your data, to object to certain processing, and to withdraw consent — the same rights described in the Keelhelm Privacy Policy (Your rights), which explains response times and how to complain to a data-protection authority. We don't sell personal information. To exercise any right, email hello (at) keelhelm (dot) com or use the Keelhelm privacy request form.

International transfers, security, and children

Your data may be processed in the United States and other countries where our infrastructure providers operate; where required, we rely on appropriate safeguards, as described in the Keelhelm Privacy Policy (International transfers). We protect data with reasonable technical and organizational measures (see Security). Our apps are business tools for Shopify merchants and aren't directed to children under 16 (see Children).

Changes

If we make a material change, we'll update the version and date above and, where appropriate, notify you.

Keelhelm company privacy policy

Keelhelm apps are operated by Keelhelm. This notice covers what is common to our Shopify apps; the company-wide Keelhelm Privacy Policy also applies and describes our baseline practices and your rights, and each app's supplemental page adds its specifics. You can exercise any privacy right — including access or deletion — through the Keelhelm privacy request form.

Contact

Questions or requests: hello (at) keelhelm (dot) com.