Brightshelf LabelsBrightshelf Labels: Privacy Policy
Effective date: on publication of the app listing · Operated by Niv Goldner (sole proprietor), trading as Brightshelf ("Brightshelf", "we"). Contact: hello@brightshelfapps.com
Draft prepared from the app's source code. This is not legal advice. Have it reviewed before publishing.
1. What this policy covers
Brightshelf Labels (the "App") is a Shopify app that lets merchants design and print product price and barcode labels. This policy explains what data the App handles when a merchant installs it.
2. Data we access through Shopify
The App requests these Shopify permissions (scopes): read_products, write_products, read_inventory, read_locations. It reads product titles, variants, SKUs, barcodes, prices, compare-at prices, images, inventory quantities and locations so it can put them on labels.
Product data and on-hand quantities (for all locations or the one you choose) are fetched when labels are generated, and we do not store copies of your product catalogue. write_products is used only by the barcode generator: it writes barcodes you have previewed and confirmed into your variants' Barcode field, and existing barcodes are never changed. Purchase-order / packing-list CSV files you import for "print on receive" are processed in your browser and are not uploaded or stored.
The App does not request or store customer, order or payment data.
3. Data we store
| Data | Why | Where |
|---|---|---|
| Shop domain, Shopify access token, session data (Shopify's session table: shop, scope, expiry, and, if Shopify provides them for an online session, the staff user's id, name, email and locale) | To authenticate the App with your store | App database |
| Label templates and their version history | So your designs are saved | App database |
| Printer profiles (name, label stock, calibration offsets, default location ID) | So prints align | App database |
| Shop settings (setup progress, chosen printer brand and stock, selected location ID) | To resume setup and remember your location | App database |
| Staff print presets (name, label stock, barcode type, quantity rule) | Shared presets for your team | App database |
| Server logs (webhook topic, shop domain and the customer/shop ID from the webhook payload, request errors) | Operations and compliance audit | Hosting provider logs |
We do not use cookies for tracking, analytics or advertising. Shopify's own embedded-app session tokens are used for authentication only.
4. How we use data
Only to provide the App's features, keep it secure and meet legal obligations. We do not sell or share personal information, and we do not use it for advertising or AI training.
5. Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Shopify Inc. | Platform, authentication, billing | See shopify.com/legal/privacy |
| Fly.io (Fly.io, Inc.) | App server, database (SQLite on an encrypted volume) and logs | United States, US East (iad) |
6. Retention and deletion
- Uninstall: your sessions and access token are deleted immediately (
app/uninstalledwebhook). - 48 hours after uninstall Shopify sends
shop/redact, and we then permanently delete all templates, template versions, printer profiles, print presets, settings and sessions for your shop. - Customer data requests / redaction (
customers/data_request,customers/redact): we store no customer data, so there is nothing to export or delete. Each request is logged and acknowledged. - Server logs are kept only as long as the hosting provider's standard log retention.
- Backups: daily snapshots of the encrypted database volume, kept for 14 days and then deleted automatically.
7. Your rights (GDPR / UK GDPR / CCPA-CPRA)
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. California residents can request to know or delete their data and cannot be discriminated against for doing so. We do not "sell" or "share" personal information as the CCPA defines those terms. To make a request, email hello@brightshelfapps.com. We respond within 30 days (GDPR: one month; CCPA: 45 days). You can also complain to your local data protection authority. Our legal basis (GDPR) is performance of our contract with the merchant and our legitimate interest in running the App securely. Niv Goldner (sole proprietor, trading as Brightshelf) is the controller of the personal data described in section 3. For a store's customer data, the merchant is the controller and we act as processor.
8. International transfers
Data may be processed outside your country by the subprocessors above, under appropriate safeguards (e.g., Standard Contractual Clauses) where required.
9. Security
Data is encrypted in transit (HTTPS). Access tokens are stored server-side only, and access to production systems is restricted.
10. Changes
We will post updates here and change the "Last updated" date.
11. Contact
Niv Goldner (sole proprietor), trading as Brightshelf · hello@brightshelfapps.com
The Brightshelf support team replies to emails within 1 business day.