Engraving & Monogram Personalizer: privacy policy
Effective: October 2026
This policy explains what the Shopify app Engraving & Monogram Personalizer ("the app") does with data. The app is made by Kavio Labs Software Limited ("Kavio Labs", "we"), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (company number 17532441). Questions: privacy@kaviolabs.com.
Summary
- The app does not collect names, emails, addresses or phone numbers of your customers.
- What shoppers type (for example an engraving text) is saved by Shopify on the cart and the order, inside your store. The app does not copy it to our server.
- The production sheet reads your orders when you open it and does not keep them.
- Settings are saved in your own Shopify store, as metafields.
- Our server keeps only what it needs to talk to your store, and deletes it after you uninstall.
What the app accesses in your store
| Data | Why | Where it is kept |
|---|---|---|
| Products and collections (titles, status, membership) | To let you pick the products that use a personalization set | Read live from Shopify, not copied to our server |
| App metafields (personalization sets, product assignments, your blocked words) | The storefront block, the price function and the checkout rule read them | In your Shopify store |
| The "Personalization" product the app creates | Carries the add-on price at checkout | In your Shopify store |
| Orders: order name, date, note, fulfillment status, line items and their properties | Only to show and print the production sheet when you ask for it. No customer fields are requested | Read live from Shopify when you open Production or print; not stored |
| Shop domain | To know which store a request belongs to | Our server |
| Access token for your store (encrypted) | To call the Shopify API for you (production sheet) | Our server, deleted when you uninstall |
| Current plan | To apply the plan limits | Our server |
| Webhook notifications from Shopify (app uninstalled, privacy requests) | To clean up after uninstall and answer privacy requests | Our server, deleted within 30 days |
Access scopes requested: write_products (products, the Personalization product, metafields), write_cart_transforms
(add-on price), write_validations (checkout rule) and read_orders (production sheet).
Your customers
The personalization block runs in the shopper's browser from Shopify's CDN. It shows the fields and the preview and adds the values to the cart as line item properties. It sets no cookies, uses no tracking and sends nothing to our server. The price function and the checkout rule run inside Shopify (Shopify Functions) and see only the cart items, their values and your settings.
An engraving text can contain personal data if a shopper types it (for example a name). Shopify stores it as part of
the order, like any other order detail, under your own privacy policy and Shopify's. We don't store it. A Shopify
customers/data_request therefore returns nothing from us and a customers/redact request has nothing to delete on
our side; to remove such a text, edit or delete the order in Shopify. We log that each request was received.
Production sheet links are signed, work for 10 minutes and are not indexed by search engines. The page is built from your orders when it is opened and is not saved on our server.
Retention and deletion
- When you uninstall the app, Shopify sends
app/uninstalled: we delete the access token immediately. - 48 hours later Shopify sends
shop/redact: we delete every record about your store. If it never arrives, an automatic job deletes the data 30 days after the uninstall. - Metafields and the Personalization product stay in your store until you delete them.
Processors and hosting
The app's server runs at apps.kaviolabs.com with our web hosting provider. Billing is done by Shopify; we never see card details. We do not sell or share data with anyone else.
Your rights
You can ask for a copy of the data we hold about your store, or for its deletion, at privacy@kaviolabs.com. We answer within one month. You can also contact your local data protection authority (in the United Kingdom, the Information Commissioner's Office, ico.org.uk).
Changes
We will post any change on this page and update the date at the top.
Need help? Write to support@kaviolabs.com with your store's .myshopify.com address.
Engraving & Monogram Personalizer is coming to the Shopify App Store. Notify me at launch.