Shelfmeadow: Category Ready: Privacy Policy

Last updated: October 21, 2026. Operator: Shelfmeadow; contact: shelfmeadow.support@gmail.com.

Summary: Shelfmeadow: Category Ready reads and updates your store's product information. It does not access your customers, orders, or payment details.

What we access

When you install Shelfmeadow: Category Ready, you allow it to read and edit products in your Shopify store (Shopify access scopes read_products, write_products, read_metaobjects and write_metaobjects; the metaobject access is for the shared attribute values, such as the color "Blue", that Shopify uses for product category attributes). We use this access to:

• check products against Shopify Catalog requirements, and
• set a product's category, or category attributes such as color, size or material, when you choose to apply a suggestion.

We do not request access to customers, orders, checkouts, inventory, themes, or files.

What we store

• Your store's Shopify domain and the access token Shopify issues (encrypted).
• Scan results: product IDs, titles, and category IDs and their pass/fail status.
• An undo log of the category changes you applied (the old and new category), kept for 30 days.
• Your plan level. Billing is handled by Shopify, and we never see card details.

Service providers

• Hosting: Fly.io, where our servers and database run.
• AI category suggestions: a product's title, product type and tags, and, when that text is too thin, a link to the product's main image (never customer data, never your store name) are sent to OpenAI to pick a category from Shopify's official list. OpenAI's handling of this data is governed by its API data policy: https://openai.com/policies/api-data-usage-policies

What we never do

We do not sell or rent data. We do not use your data for advertising. We do not collect personal information about your customers.

Retention and deletion

• When you uninstall, we delete your access token right away, and all stored store data within 48 hours.
• We honor Shopify's privacy requests (customers/data_request, customers/redact, shop/redact). Because we hold no customer personal data, customer requests have nothing to return or delete. shop/redact deletes everything we hold for your store.

Security

Data is encrypted in transit (HTTPS). Access tokens are encrypted at rest, and access is limited to the operator.

Your rights and contact

To ask for a copy or deletion of your store's data, email shelfmeadow.support@gmail.com. We reply within 30 days. Depending on where you live, you may have extra rights under laws such as the GDPR or CCPA.

Changes

We will post updates here and change the date above.