What we access from your store
- Products, variants and collections: titles, descriptions, options, SKUs, barcodes, prices, images and product metafields such as a wholesale price. Access scope:
read_products, read-only. - Store name, contact email and currency, to pre-fill the catalog branding.
We do not request access to customers, orders, draft orders, checkouts, fulfilments, payments or themes, and we never write to your products, collections or theme.
What we store
- Your catalog definitions: which collection, which template, where the wholesale price comes from, the branding text you typed. Stored so you can refresh a catalog later.
- Usage records: when a PDF was generated, how many products it had and its size. Used for the free plan's monthly limit and for support.
- Your shop domain and the app's access token, as required by Shopify to run the app.
- Generated PDFs: stored on Cloudflare R2 object storage and deleted automatically after 24 hours. Download links expire at the same time.
- Product data in transit: a snapshot of the selected products is passed to our rendering service and deleted as soon as the PDF is produced.
We do not keep your product data permanently. It is read fresh from Shopify each time you run the preflight, generate or refresh a catalog.
Where it is processed
The app and its database run on Cloudflare's network (Workers and D1). PDFs are rendered with Cloudflare Browser Rendering and stored on Cloudflare R2. Cloudflare acts as our processor under its standard terms. We do not sell, share or use your data for anything other than running the app and answering your support requests.
This website
sheetfolio.com is a static site. It sets no tracking cookies and loads no third-party scripts. The embedded app uses only the session mechanisms Shopify requires to keep you signed in to your admin.
When you uninstall
Shopify notifies us through the app/uninstalled webhook. We delete your access token immediately, and your catalog definitions and usage records within 30 days. Generated PDFs expire within 24 hours regardless.
Your rights (GDPR and similar laws)
You can request a copy or the deletion of the data we hold about your store at any time by emailing [email protected]. We respond to Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact). As we hold no customer personal data, customer requests are confirmed with an empty result; a shop redaction request deletes everything listed above.
Support email
When you email us we keep the conversation for as long as needed to resolve it and for reference if you write again. We do not add you to any mailing list.
Changes
If this policy changes in a way that affects what we access or store, we announce it inside the app before it takes effect. The date at the top is the date of the current version.
Contact
PIXON (Asterios Provatos), Serres, Greece · [email protected] · pixon.gr