Privacy Policy

1. Overview

GearUp Product Importer (“the App”) is a Shopify merchant tool that allows store owners to bulk-import and update product data (prices, costs, inventory, weight, and status) from Excel or CSV spreadsheets into their Shopify store. This policy explains what data the App collects, how it is used, and how it is protected.

The App is installed and used exclusively by Shopify merchants (store owners and their staff). It does not interact with, collect data about, or display any information belonging to end-customers of those stores.

2. Data We Collect

The App collects only the minimum data necessary to function:

a) Shopify Session & Authentication Data

When a merchant installs the App, Shopify provides an authenticated session containing: the shop domain, access token (scoped to product and inventory read/write only), and basic account information (name, email, locale) used solely to establish the session. This data is stored in our database to maintain the authenticated connection.

b) Uploaded File Data (Temporary)

When a merchant uploads an Excel or CSV file, the file contents (headers and row data) are temporarily stored in our database, linked to the merchant’s session. This data is used only to power the column mapping and confirmation screens during an active import session. It is automatically discarded when the session ends or the app is uninstalled.

c) Mapping Templates

Merchants may choose to save column mapping configurations as named templates. These templates are stored per shop domain and contain only the column-to-field mapping rules, price markup settings, supplier rules, and weight unit preferences defined by the merchant. No product data or file contents are stored in templates.

d) Import History Logs

After each import run, the App logs a summary record for that shop, including: timestamp, number of products attempted/succeeded/failed, status (success, partial success, or failure), and a per-product result list (SKU/handle, outcome, and any error messages). These logs are visible to the merchant on the Import History page and are stored per shop domain.

e) Billing Information

The App tracks the merchant’s current billing plan (Free or Paid) and usage metrics (SKUs processed). Actual payment processing is handled entirely by Shopify Billing and no payment card data is collected or stored by the App.

3. Data We Do Not Collect

• We do not collect any data about your store’s customers (names, emails, addresses, order history, etc.).
• We do not collect browsing behaviour, analytics, or tracking cookies.
• We do not share or sell any merchant data to third parties.
• We do not store product data from your Shopify store beyond what is returned in real-time API responses used to display the confirmation preview during an active import.

4. How We Use Data

All collected data is used solely to provide the App’s core features:

• File data — to parse, preview, and execute product imports.
• Session data — to authenticate API calls to the merchant’s Shopify store.
• Mapping templates — to let merchants reuse saved configurations across imports.
• Import logs — to give merchants visibility into past import results and errors.
• Billing data — to enforce plan limits and manage subscription status.

5. Shopify API Scopes

The App requests the following Shopify API scopes, and only these:

• read_products / write_products — to read existing product/variant data and apply price, cost, weight, and status updates.
• read_inventory / write_inventory — to read and update inventory quantities at merchant locations.
• read_locations — to identify inventory locations for inventory updates.

No other scopes are requested. The App cannot access orders, customers, financials, or any other store data.

6. Data Retention & Deletion

When a merchant uninstalls the App, all data associated with that shop is automatically and permanently deleted from our database, including: session records, uploaded file caches, mapping templates, import logs, and billing records. This deletion is triggered by Shopify’s app/uninstalled webhook.

Merchants may also delete individual mapping templates directly from within the App at any time.

7. Data Security

All data is transmitted over HTTPS. Access tokens are stored server-side and are never exposed to the browser. Database access is restricted to the App’s server environment. We do not log or expose sensitive credentials in application logs.

8. Compliance Webhooks

In compliance with Shopify’s requirements, the App handles the following mandatory privacy webhooks:

• customers/data_request — The App does not store any end-customer data, so no customer data report is applicable.
• customers/redact — No end-customer data is held; no action is required.
• shop/redact — All merchant shop data is deleted upon receipt of this webhook, consistent with the uninstall flow described above.

9. Third-Party Services

The App is hosted on Railway. No other third-party analytics, advertising, or data-sharing services are used.

10. Contact

If you have any questions or requests regarding this privacy policy or your data, please contact us at support@gearupsports.com.