Who we are
Merchgram is a Shopify application that lets merchants sell customisable products — apparel and merchandise with printing, embroidery and patches — and turns the resulting orders into production jobs.
When a merchant installs Merchgram, the merchant is the data controller for their customers' personal data. Merchgram is a data processor, acting on the merchant's instructions. If you bought from a merchant using Merchgram, read that merchant's own privacy policy first; this document explains what we do on their behalf.
To be completedThe registered legal name and address of the Merchgram entity, once incorporation is complete.
What personal data we process
Merchant customers (shoppers)
| Data | Source | Why |
|---|---|---|
| Email address | Shopify Customers API | Identify the shopper so the correct customer-specific pricing is applied, and display the customer record to the merchant |
| First and last name | Shopify Customers API | Display the customer record to the merchant |
| Phone number | Shopify Customers API | Display the customer record so the merchant can contact the buyer about their custom order |
| Shopify customer ID | Shopify Customers API / App Proxy | Verify identity — see below |
| Customer tags | Shopify Customers API | Apply merchant-defined pricing rules |
| Order ID, order number, line items and customisation choices | orders/paid webhook | Create the production job for the customised item |
We do not process shipping or billing addresses, payment card details, or any password or credential belonging to a shopper.
Why we verify identity
When a shopper reaches checkout, we confirm that the email in their browser matches the Shopify customer ID that Shopify's App Proxy supplies server-side. Without this check, anyone could enter another customer's email in their browser and claim that customer's negotiated pricing. This check exists to protect shoppers and merchants, and is the only place we use the email for anything other than display.
Merchant users
Account email, name, and role within their store, so they can sign in and so we can apply the right permissions.
What we do not do
- We do not sell personal data.
- We do not share personal data with third parties for their own purposes.
- We do not use personal data for advertising, marketing, or profiling.
- We do not use personal data to train machine-learning models.
- We do not make automated decisions producing legal or similarly significant effects.
How long we keep it
| Data | Retention |
|---|---|
| A store's data, after the app is uninstalled | Permanently deleted 30 days after we receive Shopify's shop/redact request. The buffer exists so an accidental uninstall can be reversed |
| An individual customer's record, on request | Anonymised on receipt of Shopify's customers/redact request |
| Merchant customer records, while installed | Kept while the merchant uses the app, and refreshed from Shopify |
Security
- Traffic is encrypted in transit (TLS, HSTS).
- Shopify credentials and access tokens are encrypted at rest.
- Each merchant's data is held in a separate database schema; one merchant cannot access another's.
- Access to customer records through our API is logged.
- Staff access to production systems is limited to named individuals.
- The production database and its automated backups are encrypted at rest.
Your rights
Under GDPR and similar laws, shoppers may request access to, correction of, or deletion of their personal data. Direct these requests to the merchant you bought from — they are the controller. Merchants can raise requests with us through Shopify's built-in customer data request mechanism, which we handle within the timeframe Shopify requires, or by contacting the privacy address above.
International transfers
To be completedHosting region and the transfer mechanism for merchants outside it.
Sub-processors
To be completedThe full list of sub-processors — hosting provider, email provider, and any other service that touches personal data.
Changes
We will update this policy as the app changes and revise the date above.