Privacy policy · Verified Bulk Editor

In short

The app reads and changes product data only: prices, compare-at prices, tags, metafields and image alt text. It never asks for access to customers or orders, and it stores no customer data.
To make exact reverts and verification possible, it stores the original, intended and read-back values of the fields each task changes, for your plan’s history window: 30, 90 or 180 days after the task finishes.
Everything it stores for your store is deleted within 48 hours of uninstalling.
There are no analytics, no tracking and no ads, and I never sell or share your data.

Who this policy covers

This policy covers the Shopify app Verified Bulk Editor (“the app”), made by Christian Ortiz, an individual publishing as Christian Ortiz Studio (“I”, “me”). It explains what the app does with data from the Shopify stores where it’s installed, and how I handle the information you share with me.

It doesn’t cover Shopify itself, which is governed by Shopify’s privacy policy.

Questions about this policy: support@christianortiz.studio.

What the app can access

When you install the app, Shopify asks you to approve two permissions:

Products (read and write): to filter your products, preview changes, save original values, write the changes and read them back. This covers prices, compare-at prices, tags and product and variant metafields.
Files (read and write): to set alt text on images that are already on your products.

It requests no access to customers, orders or Shopify’s protected customer data. Billing goes through Shopify; the app never sees or collects payment details.

What the app stores, and for how long

The app keeps its data in its own database, on the server that runs it.

Your store’s settings: your store’s myshopify domain, timezone and currency, your plan and its status, the export columns you saved as defaults, and when the app was installed. Kept until you uninstall.
Access credentials: the access token Shopify issues for your store, so scheduled and background tasks can run when you’re not in the admin. Deleted as soon as you uninstall.
Tasks: each task’s name, filters, changes, schedule, status, counts, timings and error messages.
Task items: for every field a task changes, the product, variant or image ID, the product’s title and the variant or image label, the field, the intended value, the value shown in the preview, the value read back from your store, the result and Shopify’s error message, if any.
Saved originals: the original value of every field, captured before the task writes anything. They’re never changed after they’re saved, which is what makes an exact revert possible.

Tasks, their items and their saved originals are deleted automatically when your plan’s history window ends after the task finishes: 30 days on Free, 90 on Standard and 180 on Pro. Draft tasks that never ran are kept until you uninstall.
Exports: CSV files you create on the Exports page. Each file is deleted 24 hours after it’s created. The export’s entry in the list (its kind, columns and row count, without the data) stays until you uninstall.
Tour progress: for each staff member who opens the app, their Shopify staff user ID and when they saw or finished the first-run tour. Kept until you uninstall.
Webhook records: the ID, topic and time of each notification Shopify sends the app, so none is processed twice. Deleted after 30 days.
Background jobs: the app’s queue of work (for example “write batch 3 of task X”), with progress checkpoints so a task can resume after a restart. Removed with their task.

Product data can contain personal data only if you’ve typed it into a product field yourself. The app handles it like any other value.

Where the app runs

The app runs on a server I operate, with a hosting provider, and its database and export files live on that server. The hosting provider and the region where your data is kept will be named here before the app is available on the Shopify App Store, together with how long the provider keeps backups and logs, if any.

The app’s screens run inside your Shopify admin and load Shopify’s own App Bridge and Polaris files from Shopify. They load nothing from anyone else.

Deleting your data

Automatically: tasks and saved originals after your plan’s history window, export files after 24 hours, and webhook records after 30 days, by a daily clean-up.
When you uninstall: the app deletes your store’s access credentials at once and cancels any scheduled or running tasks, then deletes everything else it stores for your store: settings, tasks, saved originals, results, exports, tour progress and webhook records. This normally finishes within minutes. Shopify also sends a request to erase your store’s data 48 hours after you uninstall, and the app deletes anything left at that point, so all of it is gone within 48 hours. Reinstalling starts fresh.
Ask me: email support@christianortiz.studio from your store’s contact address with your myshopify domain, and I’ll confirm what’s stored or delete it.

The app handles Shopify’s mandatory privacy requests:

Customer data request and customer redaction: the app stores no customer data, so there’s nothing to report or delete. It records only that the request arrived.
Shop redaction, sent 48 hours after you uninstall: the app deletes everything it stores for your store.

Every request from Shopify is checked for Shopify’s signature before the app acts on it.

Logs

The app’s server keeps error logs so I can find and fix problems. They can include your store’s domain, product IDs and Shopify’s error messages, but no customer data.

Who’s responsible for your data

For the data the app handles in your store, you (the merchant) are the controller and I’m the processor: the app processes it only to do what you ask it to.
For support emails you send me, I’m the controller.
Under the California Consumer Privacy Act, I’m your service provider. I don’t sell or share personal information.

I don’t sell, rent or share your data with anyone. The app’s data is handled by Shopify, as the platform it runs on, and by the hosting provider that runs its server and database, which will be named on this page. There are no other third parties. I’d disclose information only if the law required me to.

Security

The app asks only for the permissions it needs: products and files. No customer or order access.
It uses Shopify’s own sign-in for embedded apps: every request from your admin carries a session token from Shopify, which the app verifies.
Every notification from Shopify is checked for its signature, and unsigned ones are refused.
Access to the app’s server and database is limited to me.
Security contact: email support@christianortiz.studio with Security in the subject line. I acknowledge security reports within two business days.
If I learn of a security incident that affects your data, I’ll tell affected merchants without undue delay.

Your rights

Depending on where you live, you may have the right to access, correct, delete or move your personal data, or to object to how it’s used. Email me and I’ll respond within 30 days. If a customer of your store contacts me directly, I’ll pass the request on to you.

Children

The app is a business tool and isn’t directed at children.

Changes to this policy

If I change this policy, I’ll update the date at the top of this page. If a change affects how your data is handled in a meaningful way, I’ll also say so in the app or its App Store listing before it takes effect.

Contact

Christian Ortiz, publishing as Christian Ortiz Studio
support@christianortiz.studio