Privacy Policy

for TidyStack

Effective date: 2 October 2026 · Last updated: 2 October 2026

TidyStack (the “App”) is a free Shopify app provided by DL Studio (“we”, “us”, “our”). The App gives merchants bulk tools for store cleanup: fixing product titles, adding or removing product tags, keeping a Sale collection in sync with active discounts, and deleting unused navigation menus.

This Privacy Policy explains what information the App accesses, collects, and stores when a merchant installs and uses it with their Shopify store, how that information is used, and the choices merchants have.

In short: the App works with your product catalog and navigation menus. It does not access customer or order data, it does not run on your storefront, and the only data we store is the technical session record needed to keep the App connected to your store.

1. Information We Access Through Shopify

When you install the App, you grant it the permissions listed below. The App requests only the permissions its tools need.

Permission	What the App reads or changes	Used for
`read_products` `write_products`	Product IDs, titles, tags, status, and featured image; collection IDs, titles, and handles. The App updates product titles and tags and creates smart collections.	Title Cleanup, Product Tags, Sale Collection
`read_discounts`	Active code and automatic discounts, limited to the products, variants, and collections each discount applies to.	Sale Collection
`read_online_store_navigation` `write_online_store_navigation`	Navigation menu IDs, titles, and handles, and whether a menu is a default menu. The App deletes the menus you select.	Delete Menus

This store data is read from Shopify on demand, shown to you inside the Shopify admin, and changed only when you start an action such as applying title changes or deleting menus. We do not copy it to our own database.

2. Information We Store

We store one type of record for each store that installs the App:

App session data: your shop domain (your-store.myshopify.com), the API access token issued by Shopify, the permissions granted to the App, and session state and expiry information. Where Shopify includes them in a session, this record may also hold basic details of the Shopify staff account using the App (name, email address, language, and account role).

We also receive the following:

Technical logs: our servers and hosting provider automatically generate logs when the App is used. These can include the shop domain, the time and type of a request or Shopify webhook, error messages, IP address, and browser type.
Support communications: if you contact us, we receive your email address and whatever you choose to include in your message.

The App is free. We do not collect payment or billing information.

3. Information We Do Not Collect

No customer data. The App does not request access to, read, or store your customers’ names, email addresses, phone numbers, or addresses.
No order data. The App does not access orders, payments, or checkout information.
No storefront tracking. The App runs only inside the Shopify admin. It adds no scripts, cookies, pixels, or other tracking technologies to your online store, and it collects nothing from the people who visit or buy from your store.
No advertising or analytics trackers. The App does not include third-party advertising or behavioral analytics tools.

4. How We Use Information

We use the information described above only to:

Provide the App’s features: title cleanup, bulk tagging, smart collection creation, sale collection sync, and bulk menu deletion
Authenticate the App with your store and keep it connected
Maintain the App’s security, reliability, and performance, and diagnose errors
Respond to support requests
Comply with legal obligations and Shopify’s requirements for app developers

We do not sell or rent personal data, we do not share it for advertising, and we do not use it for profiling, automated decision-making, or any purpose unrelated to providing the App.

5. Sharing and Service Providers

We share information only with the service providers needed to run the App, and only to the extent they need it:

Shopify – the App operates inside the Shopify admin and exchanges data with Shopify’s APIs.
Vercel – application hosting and server logs.
A managed PostgreSQL database provider – storage of the App session data described in Section 2.

These providers process data on our behalf. We may also disclose information if required by law or to protect our legal rights.

6. Data Retention and Deletion

App session data is kept for as long as the App is installed on your store.
When you uninstall the App, Shopify notifies us and we delete your store’s session data immediately. Shopify sends a further shop redaction request 48 hours after uninstallation, at which point we delete any data still associated with your store.
Technical logs are kept for a limited period by our hosting provider and are then deleted automatically.
Support emails are kept for as long as needed to resolve your request and maintain a record of it.

Uninstalling the App does not undo changes it made to your store at your request. Updated titles, added or removed tags, created collections, and deleted menus remain as they are in Shopify.

7. Data Security

All data exchanged between your browser, the App, and Shopify is encrypted in transit using TLS (HTTPS).
Requests to the App are authenticated by Shopify, and webhooks are verified using Shopify’s HMAC signature before they are processed.
Access to stored data and production systems is limited to authorized personnel.

No method of transmission or storage is completely secure, but we work to protect the limited data we hold.

8. Your Rights and Choices

Depending on where you are located, privacy laws such as the GDPR, the UK GDPR, or the CPRA may give you the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing. We extend these rights to all merchants regardless of location.

To exercise any of these rights, email us using the details in Section 12. We respond within 30 days.
You can remove the App’s access to your store at any time by uninstalling it from your Shopify admin.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Requests from your customers

The App supports Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact). Because the App does not collect or store any data about your customers, there is no customer data for us to provide or erase. If one of your customers contacts us directly, we will refer them to you as the merchant responsible for their data.

9. International Data Transfers

The App can be installed by merchants worldwide. We and our service providers may process the data described in this policy in countries other than the one where you are located, including countries outside the European Economic Area and the United Kingdom. Where we transfer personal data internationally, we rely on our service providers’ data protection terms and appropriate safeguards as required by applicable law.

10. Children’s Privacy

The App is a business tool for Shopify merchants. It is not intended for children, and we do not knowingly collect personal data from anyone under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy when the App’s features or our data practices change, or to meet legal or Shopify requirements. The “Last updated” date at the top of this page shows the latest version. We encourage you to review this page from time to time.

12. Contact Us

If you have questions about this Privacy Policy or how the App handles data, contact us:

Company: DL Studio
Email: tongdkhai@gmail.com