Last updated: December 9, 2025

Privacy Policy

Bulk Product Editor ("the App") is provided by Xyppy ("we," "us"). This policy explains how we collect, use, and protect information when you install or use the App in your Shopify store.

Information we collect

  • Store identity: shop domain, shop and owner contact details, plan, and billing status from Shopify.
  • Catalog context: product and variant data you select or edit through the App (e.g., titles, tags, SKUs, prices, metafields) to run bulk jobs.
  • Job records: filters, actions, audit logs, and status updates needed to preview, execute, and troubleshoot jobs.
  • Support context: details you share with support (e.g., shop URL, job IDs, screenshots) when requesting help.

How we use information

  • Operate and improve the App, including previews, background jobs, and logs.
  • Provide billing, usage caps, and plan management.
  • Respond to support requests and diagnose issues.
  • Comply with Shopify requirements and applicable law, including privacy webhooks.

We do not sell personal data or use it for advertising.

Data retention and deletion

  • Job records and operational logs are kept for up to 90 days to help you review and troubleshoot changes.
  • On uninstall, API access is revoked immediately and associated session data is deleted. Residual operational data is pruned during routine log cleanup.
  • We honor Shopify privacy webhooks (`customers/data_request`, `customers/redact`, `shop/redact`) to delete or redact data as required.

Sharing and processors

  • Data is shared with Shopify to fulfill requested edits and to validate billing and permissions.
  • We use infrastructure providers (e.g., hosting, monitoring, logging, email) strictly to operate the App under confidentiality and security commitments.
  • We do not sell or rent your data to third parties.

Security

  • All traffic to and from the App uses TLS encryption.
  • Access to operational data is restricted to authorized personnel with role-based controls.
  • We monitor for abuse and follow least-privilege principles for API scopes (currently read_products and write_products).

Your choices and rights

  • You can request access, correction, or deletion of data processed by the App by emailing support.
  • You can uninstall the App at any time from your Shopify admin, which revokes our access tokens immediately.
  • Shopify merchants can also submit data requests directly through Shopify; we process incoming privacy webhooks automatically.

Contact

Questions or requests? Email support@xyppy.com.