Privacy Policy

Overview

MetaVault (“the app”, “we”) is a Shopify app that helps merchants view, edit, import, export, back up, and clean up the metafields and metaobjects on their store. This policy explains what data the app accesses, why, and how it is handled.

Information we access

When you install MetaVault on a store, the app requests only the scopes needed to do its job:

• Store metafields and metaobjects (read and write).
• Products, collections, customers, and orders — solely to read and write their metafields.
• Your store domain and the installing user’s email, used to identify your store and send job notifications.

MetaVault accesses this data only while performing an action you initiate (such as an edit, import, export, or backup). It does not read storefront customer browsing data and requests no scopes beyond those listed above.

How we use and store data

• Metafield & metaobject values are processed to fulfil the action you requested. Backups are stored as a snapshot file so you can download or restore them, and are automatically deleted after 30 days.
• Import, export, and error-report files are generated on demand and served through a time-limited, signed download link. They are automatically deleted after 7 days.
• Job records and an activity log (action type, resource, row counts, and timestamps) are retained so you can review what the app has done.
• We do not sell your data, and we do not use it for advertising.

Data retention & deletion

Backups are deleted after 30 days, and import/export files after 7 days — in both cases the file is removed from storage, not merely hidden. When you uninstall the app, Shopify notifies us and we delete the store’s access token, settings, job history, and any stored files. MetaVault also honours Shopify’s mandatory GDPR webhooks:

• customers/data_request — we report any data held for a customer.
• customers/redact — we delete data associated with a customer.
• shop/redact — we delete all data for a store 48 hours after uninstall.

Subprocessors

MetaVault runs on standard cloud infrastructure (application hosting, a PostgreSQL database, a Redis queue, and object storage for generated files). These providers process data only to operate the service on our behalf.

Your rights

You may request access to, correction of, or deletion of your data at any time by contacting us. Uninstalling the app triggers deletion automatically.

Contact

Questions about this policy? Email support@storelivo.com.