Privacy Policy: Shelfport
Last updated: 27 September 2026
Shelfport ("the app") is a Shopify app published by Dixon App Studio LLC ("we", "us"). It exports and imports a store's collections. This policy explains what the app collects when a merchant installs it, why, how long it is kept, and how to have it deleted.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Your store's myshopify domain and the Shopify access token Shopify issues at install | To read and change the collections you ask the app to export or import | Until you uninstall. The token is deleted at uninstall; the store record is deleted when Shopify sends shop/redact (48 hours later). |
| A log of each import: the collection handles it touched, what it did, and each changed collection's previous values (title, SEO, rules, metafields, product list) | To show you the import's history and let you undo it | 35 days (the longest undo window, plus five days), then deleted automatically |
| Which setup steps you have completed (export, template, import) | To show your progress on the Home screen | Until you uninstall |
No customer data. The app only asks Shopify for access to products, collections and sales-channel publishing. It cannot read customers, orders or any shopper's personal information, and it stores none. Files you export are created in your browser and are never kept by us. Files you import are read in your browser; only the collection values are sent to the app to be written to your store.
We do not use cookies or tracking pixels, and the app adds nothing to your storefront.
Where the data is stored
On Cloudflare (Workers and D1), which encrypts data at rest and in transit. All traffic between the app, Shopify and your browser uses HTTPS. Requests are authenticated with Shopify session tokens and webhooks with HMAC signatures; each store can only reach its own data.
Sharing
We do not sell, rent or share store data. Our only processors are Shopify (the platform) and Cloudflare (hosting). Payments for the Pro plan are handled by Shopify's billing; we never see card details.
Your rights and deletion
Uninstalling the app deletes its access token immediately and every other record for your store when Shopify sends shop/redact.
To have data deleted sooner, or to ask what is held, email support@dixonappstudio.com; we answer within 30 days.
Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) are handled automatically.
Contact
Dixon App Studio LLC · support@dixonappstudio.com · dixonappstudio.com