Privacy Policy
1. Who this applies to
This policy covers merchants who install Varianton on their Shopify store, and the shoppers who use the product customizer on those stores. We act as a data processor on behalf of the merchant for store data, and as a controller for our own account and billing records.
2. What we collect
- Store information — your myshopify.com domain, an access token (to talk to Shopify on your behalf), your store currency, and your subscription plan.
- Configuration you create — the products, options, prices, rules and images (including any tint masks or artwork) you set up in the app.
- Shopper configurations — when a shopper customizes a product, we store the choices they made and the price. This does not include their name, email, or address. Any logo/image a shopper uploads is stored in your Shopify Files, not on our servers.
- Technical data — IP addresses and request metadata used transiently for security and rate-limiting, and standard server logs.
We do not collect shopper payment details, and we do not receive customer personal data from orders.
3. How we use it
- To provide the customizer, calculate configured prices, and enforce the correct price at checkout.
- To operate your subscription (billing is handled by Shopify; we store only your plan status).
- To secure the service (rate limiting, abuse prevention) and to provide support.
We do not sell your data or shoppers' data, and we do not use it for advertising.
4. Data retention & deletion
We keep your configuration data for as long as the app is installed. When you uninstall, Shopify notifies us and we delete your store's data (typically within 48 hours) in response to the mandatory shop/redact request. You can also request deletion at any time by emailing us.
5. Your rights (GDPR)
If you are in the EU/EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To exercise any of these, contact info@varianton.com. Because we hold no shopper personal data, customer data-request and redaction webhooks from Shopify are acknowledged with no personal data to return.
6. Security
Data is transmitted over HTTPS and stored with our hosting providers under their security controls. Configuration prices are cryptographically signed to prevent tampering at checkout. Access tokens are stored server-side only.
7. Changes
We may update this policy; material changes will be reflected by the "Last updated" date above. Continued use of the app after an update constitutes acceptance.
8. Contact
Varianton — info@varianton.com