Privacy Policy

Product Group App · Last updated: August 14, 2026

This Privacy Policy describes how Product Group ("the App", "we", "us") collects, uses, and shares information when a merchant installs and uses the App on their Shopify store. By installing the App, you agree to the collection and use of information as described here.

Information We Collect

When you install and use the App, we may access and store:

• Shop information: your shop's domain (e.g. your-store.myshopify.com), and the API access token issued by Shopify for your store.
• Product data: product IDs, titles, images, availability, and the metafield values you configure the App to read (for example a group code and a variant property such as color or size), used to build and cache swatch data.
• App settings: the configuration you choose in the App admin (metafield keys, display and appearance options), stored as a shop-level metafield.

We do not collect or store customer personal information (such as customer names, addresses, or payment details). The App does not access order or checkout data.

How We Use Information

• To operate the App's core functionality: linking related products and rendering swatches on the product and collection pages of your storefront.
• To cache product/group data (via Shopify metafields) so the App performs efficiently without needing an external database for this data.
• To provide support when you contact us.
• To comply with legal obligations and enforce our terms.

Data Storage

Shopify session and access-token data is stored in our application database, used solely to authenticate API requests to your store on your behalf. Product and configuration data used by the App's caching layer is stored directly as Shopify metafields on your shop and products, within your own Shopify store.

Data Sharing

We do not sell or rent your data. We do not share your shop or product data with third parties, except:

• With service providers who host our infrastructure (e.g. our hosting and database providers), solely to operate the App.
• When required by law, or to protect our rights, users, or the public.

Data Retention & Deletion

When you uninstall the App, we delete the stored session/access-token record for your shop. Configuration and cache data stored as Shopify metafields on your shop and products remains in your Shopify store and is governed by Shopify's own data retention, since it lives in your store's data, not ours.

In accordance with Shopify's API Terms of Service and applicable data protection laws (including GDPR and CCPA), we respond to mandatory compliance webhooks from Shopify (customer data request, customer redact, and shop redact) and will delete or provide personal data as required by those requests.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or request deletion of personal data we hold about you. To exercise these rights, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at commerslab@gmail.com.