Sortby never sees your customers’ data

Sortby requests exactly two Shopify access scopes: read_products and write_products. It does not request access to customers, orders, draft orders, checkouts, discounts, or any other part of your store. Shopify shows you this list on the install screen and enforces it at the API level.

Your shop domain and access tokens

The myshopify.com domain of the store and the OAuth tokens that let Sortby call the Shopify API on its behalf. Tokens are encrypted at rest.

A copy of your product catalogue

Titles, handles, descriptions, vendor, product type, tags, status, price range, inventory totals, featured image URL and the created, updated and published dates. Sortby needs these locally to score products without hitting the API on every sort.

Product metafields

Namespace, key, type and value for the metafields on your products, so they can be used as sort criteria. Whatever you have chosen to store in a product metafield is copied as-is.

Collections and your rules

Collection titles, handles, product counts, and the boost and sort rules you configured, plus the computed sort scores and a log of sort and import runs.

• ✕Customer names, emails, phone numbers or addresses
• ✕Orders, carts or checkout data
• ✕Payment or card details
• ✕Storefront visitor tracking of any kind

Because none of this data is ever requested, there is nothing to compile when a customer files a data request, and nothing to erase when they ask to be forgotten.

When you uninstall Sortby, the app receives Shopify’s app/uninstalled webhook and deletes your shop record immediately, together with every product, metafield, collection, rule, score and job record attached to it. Nothing is retained for later.

Shopify also sends a shop/redact request 48 hours after uninstall. Sortby handles it as a safety net, and by then there is normally nothing left to delete.

All three of Shopify’s privacy webhooks are registered and handled, with their authenticity verified by HMAC signature:

• customers/data_request — acknowledged; Sortby holds no customer data to compile.
• customers/redact — acknowledged; there is no customer data to erase.
• shop/redact — deletes the shop and all associated records if any remain.

Sortby sends your data to no one. The app has no analytics, no error tracking service, no email provider, no AI service and no payment processor inside it. Its only outbound calls are to Shopify’s own Admin and Partner APIs, to read your catalogue, write the new collection order, and check which plan the store is subscribed to.

Payments are handled entirely by Shopify through its managed pricing. Sortby never sees a card number.

OAuth access tokens are encrypted at rest in the database. Sortby uses short-lived tokens that are refreshed automatically, so a token is not valid indefinitely. Sensitive parameters are filtered out of application logs.

Sortby is built and operated by inkOfPixel Srl, Piazza Castello 26, 20121 Milano, Italy. For any question about data handling, or to exercise your rights under the GDPR, write to [email protected].

This page is a plain-language summary of how the app behaves. The privacy policy is the binding document.