Sell by Measure: privacy policy
Effective: October 2026
This policy explains what the Shopify app Sell by Measure ("the app") does with data. The app is made by Kavio Labs Software Limited ("Kavio Labs", "we"), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (company number 17532441). Questions: privacy@kaviolabs.com.
Summary
- The app does not collect, store or process personal data of your customers.
- The app does not read your orders or customer records.
- Product settings (unit, step, minimum, maximum) are saved in your own Shopify store, as product metafields.
- Our server keeps only what it needs to talk to your store, and deletes it after you uninstall.
What the app accesses in your store
| Data | Why | Where it is kept |
|---|---|---|
| Products and variants (titles, prices, options, stock levels) | To show your catalog in the app, set the price per step and the unit price, and show stock in units | Read live from Shopify, not copied to our server |
Product metafield measure (the app's settings per product) |
The storefront block and the checkout check read it | In your Shopify store |
| Shop domain | To know which store a request belongs to | Our server |
| Access token for your store (encrypted) | To call the Shopify API for you | Our server, deleted when you uninstall |
| Current plan | To apply the plan limits | Our server |
| Webhook notifications from Shopify (app uninstalled, privacy requests) | To clean up after uninstall and answer privacy requests | Our server, deleted within 30 days |
Access scope requested: write_products (read and update products, variants and their metafields).
Your customers
The measure input on your product page runs in your shopper's browser from Shopify's CDN. It sets the cart quantity and shows prices. It sets no cookies, uses no tracking and sends nothing to our server. The checkout check runs inside Shopify (Shopify Functions) and sees only cart quantities and product settings.
Because we hold no customer data, a Shopify customers/data_request returns nothing and a customers/redact
request has nothing to delete. We still log that each request was received.
Retention and deletion
- When you uninstall the app, Shopify sends
app/uninstalled: we delete the access token immediately. - 48 hours later Shopify sends
shop/redact: we delete every record about your store. If it never arrives, an automatic job deletes the data 30 days after the uninstall. - The product metafields stay in your store until you delete them (Settings → Custom data in your Shopify admin).
Processors and hosting
The app's server runs at apps.kaviolabs.com with our web hosting provider. Billing is done by Shopify; we never see card details. We do not sell or share data with anyone else.
Your rights
You can ask for a copy of the data we hold about your store, or for its deletion, at privacy@kaviolabs.com. We answer within one month. You can also contact your local data protection authority (in the United Kingdom, the Information Commissioner's Office, ico.org.uk).
Changes
We will post any change on this page and update the date at the top.
Need help? Write to support@kaviolabs.com with your store's .myshopify.com address.
Sell by Measure is coming to the Shopify App Store. Notify me at launch.