Privacy Policy for Sortly

Last Updated: October 2025

Introduction

This Privacy Policy describes how Sortly ("we", "our", or "us") collects, uses, and protects information when you use our Shopify application (the "App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

Information We Collect

1. Shop Information

When you install and use Sortly, we collect:

  • Store domain and name
  • Store owner contact information
  • Shopify plan details
  • Installation and authentication tokens

2. Product Data

To provide our product sorting and ranking services, we access:

  • Product titles, descriptions, and IDs
  • Product variants and SKUs
  • Product prices and compare-at prices
  • Product inventory levels
  • Product vendors and tags
  • Product creation dates
  • Product images and media

3. Collection Data

We access information about your store's collections:

  • Collection titles and IDs
  • Collection types (manual/automated)
  • Products assigned to collections
  • Collection sorting preferences

4. Order Data

To calculate best-selling metrics and product performance:

  • Order line items
  • Quantity sold per product
  • Order dates and timestamps
  • Revenue per product

5. Subscription Data

For billing and feature access management:

  • Active subscription status
  • Plan type and pricing
  • Subscription start and end dates
  • Trial period information

6. Usage Data

We collect data about how you use the App:

  • Ranking rules created and applied
  • Collections modified
  • Sync operations performed
  • Job execution history

How We Use Your Information

We use the collected information to:

1. Provide Core Services

  • Sort and rank products in your collections based on your defined rules
  • Calculate product performance metrics (best-selling, margins, etc.)
  • Apply and maintain your sorting preferences
  • Sync product and inventory changes

2. Maintain and Improve the App

  • Monitor app performance and reliability
  • Debug technical issues
  • Optimize sorting algorithms
  • Develop new features and functionality

3. Billing and Subscription Management

  • Process subscription payments through Shopify
  • Manage trial periods and plan upgrades
  • Enforce plan limits and restrictions

4. Communication

  • Send service-related notifications
  • Provide customer support
  • Respond to your inquiries

Data Storage and Security

Storage

  • All data is stored securely in encrypted databases
  • We use industry-standard MySQL databases
  • Data is stored on secure servers with restricted access
  • Background job queues (Redis/BullMQ) are used for processing

Security Measures

  • All data transmission is encrypted using SSL/TLS
  • Authentication is handled through Shopify's OAuth system
  • Access to your data is restricted to authorized personnel only
  • We implement regular security audits and updates
  • Database backups are performed regularly

Data Retention

  • Active subscription data is retained as long as the App is installed
  • Historical data (sorting history, job logs) is retained for 90 days
  • Upon app uninstallation, your data is retained for 30 days to facilitate reinstallation
  • You may request complete data deletion at any time

Data Sharing and Disclosure

We do not sell, trade, or rent your data to third parties. We may share your information only in the following circumstances:

  1. With Shopify: As required by the Shopify App Store agreement and for authentication purposes
  2. Service Providers: With trusted third-party service providers who assist in operating our App (hosting, analytics, support) under strict confidentiality agreements
  3. Legal Requirements: When required by law, court order, or government regulation
  4. Business Transfers: In connection with a merger, acquisition, or sale of assets (with advance notice to users)

Your Rights and Choices

You have the right to:

  1. Access Your Data: Request a copy of the data we hold about you
  2. Correct Your Data: Request correction of inaccurate or incomplete data
  3. Delete Your Data: Request deletion of your data at any time
  4. Data Portability: Request your data in a machine-readable format
  5. Withdraw Consent: Uninstall the App to stop data collection
  6. Object to Processing: Object to specific data processing activities

To exercise these rights, please contact us at the email address provided below.

Shopify Integration

Sortly is a Shopify App and operates within Shopify's ecosystem:

  • We access your store data through Shopify's Admin API
  • We comply with Shopify's App Store requirements and policies
  • Authentication and authorization are managed by Shopify
  • Subscription billing is processed through Shopify's billing system

For more information about Shopify's data practices, please review Shopify's Privacy Policy.

API Scopes and Permissions

Sortly requests the following Shopify API scopes:

  • write_products: To update product positions in collections
  • read_inventory: To access inventory levels for sorting
  • read_orders: To calculate best-selling metrics

We only request permissions necessary for core App functionality.

Webhooks

We subscribe to the following Shopify webhooks to keep data synchronized:

  • app/uninstalled: To handle app uninstallation
  • app_subscriptions/update: To manage billing and subscriptions
  • products/update: To sync product changes
  • inventory_levels/update: To sync inventory changes

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Sending a notification through the App or email
  • Posting a notice in the Shopify App Store listing

Your continued use of Sortly after changes become effective constitutes acceptance of the updated Privacy Policy.

Cookies and Tracking

Sortly uses minimal cookies for:

  • Session management and authentication
  • Maintaining your logged-in state
  • Storing user preferences

We do not use third-party tracking cookies or advertising cookies.

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at the email address provided below.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

For urgent privacy concerns, please mark your email subject line with "PRIVACY REQUEST" for priority handling.

Compliance

We are committed to complying with applicable data protection laws, including:

  • General Data Protection Regulation (GDPR) - European Union
  • California Consumer Privacy Act (CCPA) - United States
  • Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
  • Other applicable regional data protection regulations

By using Sortly, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.