Privacy Policy for MetafieldMend
MetafieldMend is a product developed by NineApps, a trading name of Luminara Core LTD, focused on providing Shopify plugins that simplify and improve the merchant experience. Your privacy is important to us, and this policy outlines how we handle data within the MetafieldMend app.
What is MetafieldMend?
MetafieldMend is a Shopify app that helps merchants manage Google Shopping metafields for their products. It provides gap analysis, bulk editing, and default value management to ensure products have complete metadata for Google Shopping feeds.
Information We Collect
MetafieldMend collects and stores the following operational data to provide its services:
- Shop Information: Your Shopify shop domain and encrypted access tokens for API authentication
- Product Metadata: Product titles and Google Shopping metafield values (such as color, size, material, GTIN, etc.)
- User Preferences: Default metafield values you configure, fields you've dismissed from your workflow
- Operational Data: Gap analysis results (cached for performance), bulk operation queue status, and rate limiting tracking
Important: MetafieldMend does NOT collect, store, or process any customer personal information, payment data, or customer contact details. All data we store is related to your shop configuration and product metadata only.
How We Use Your Data
The data we collect is used exclusively for the following purposes:
- Authentication: Encrypted access tokens authenticate MetafieldMend with Shopify's API on your behalf
- Feature Functionality: Store your default metafield values and preferences to streamline your workflow
- Performance Optimization: Cache gap analysis results to provide faster loading times and reduce API calls
- Bulk Operations: Track and manage bulk editing operations to ensure reliable processing of large product catalogs
Data Storage & Security
All data is stored in an encrypted database with the following security measures:
- Data Isolation: Complete separation between merchant data - your data is never mixed with other merchants
- Encryption: Access tokens and sensitive data are encrypted in production environments
- Secure Infrastructure: Database hosted on secure servers with regular backups
- Access Control: Strict access controls limit data access to authorized systems only
GDPR Compliance & Data Deletion
MetafieldMend is fully compliant with GDPR and Shopify's data protection requirements:
- Automatic Deletion: When you uninstall the app, Shopify sends a webhook after 48 hours, triggering automatic deletion of all your data from our systems
- Cascade Deletion: All associated data (defaults, cache, preferences, operation history) is automatically deleted via database cascade rules
- No Customer Data: Since we don't collect any customer personal information, there is no customer data to delete or redact
- GDPR Webhooks: We implement all three mandatory Shopify GDPR webhooks (customer data request, customer redact, shop redact)
Third-Party Services
MetafieldMend does not share your data with any third-party services. All data processing occurs within the Shopify ecosystem and our secure infrastructure. We do not use external analytics, advertising networks, or data processors.
Cookies & Tracking
MetafieldMend does not use cookies or embed any tracking scripts in your storefront or admin area. The app uses standard Shopify session management for authentication, which is handled entirely by Shopify's infrastructure.
Your Rights
As a merchant using MetafieldMend, you have the following rights:
- Right to Access: You can view all data stored by MetafieldMend within the app interface
- Right to Deletion: Uninstalling the app triggers automatic deletion of all your data within 48 hours
- Right to Data Portability: Contact us to request an export of your stored preferences and settings
- Right to Object: You can stop data processing at any time by uninstalling the app
Data Retention
We retain your data only for as long as you have the app installed and actively use it. Upon uninstallation:
- Shopify waits 48 hours (in case of accidental uninstall)
- Shopify then sends a shop/redact webhook to our systems
- We immediately and permanently delete all associated data
- No backups or copies are retained after deletion
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal compliance. We will notify users of any material changes through the Shopify app admin or via email.
Contact Us
If you have any questions or concerns about this privacy policy or how we handle your data, please contact us:
NineApps is a trading name of Luminara Core LTD.
Last Updated: October 2025