Privacy Policy

Last updated: June 2026

1. What we collect

When you install and use Metercart, we collect and process:

• Shop domain and owner email — collected at install via Shopify OAuth. Used for account identification and transactional communication only.
• Product references — Shopify product and variant IDs of the products you assign a calculator to, plus variant price and inventory-policy settings (read via the Shopify Admin API to verify pricing and warn about inventory tracking).
• Calculator configuration — your prices, formulas, tiers, limits, labels, and widget styling.
• Calculation events — the dimensions a customer enters, the computed price, and whether the item was added to the cart or ordered. These are anonymous: we store no customer name, email, address, or any other buyer identity.
• Order references — when an order contains a measured product, we store the order's ID and order number (e.g. #1001) to mark which calculations converted and, where a measured product was bought without the calculator, to flag that order for the merchant's review. We never read or store the customer fields of the order (no name, email, or address).
• Server logs — IP address, timestamp, request path. Standard infrastructure logs, not app-level tracking.

We do not collect customer personal data. Order webhooks are processed only to (a) match anonymous calculation events to order line items via our own line item property, and (b) flag orders where a measured product bypassed the calculator. Of the order payload, we read solely the order ID, the order number, and each line item's product ID, quantity, and properties — nothing else is parsed, logged, or stored.

2. How we use it

• To compute and validate prices for measured products.
• To show you analytics (calculations → carts → orders).
• To enforce plan limits and operate billing via Shopify.

We never sell data. We never use your data to train AI models. Data is processed on servers in the EU (Railway, europe-west4).

3. GDPR

We honor Shopify's mandatory privacy webhooks: on a customer data request we report that no buyer personal data is stored; on customer redaction there is nothing to delete; on shop redaction (48 hours after uninstall) we delete all shop data — calculators, assignments, calculation logs, and the shop record itself.

4. Data retention

Shop data (calculators, assignments, settings) is retained while the app is installed. Anonymous calculation events are deleted automatically after 90 days, or after 365 days when linked to an order (so your conversion analytics stay meaningful for a year). Resolved order-review flags are deleted after 90 days. After uninstall, access tokens are revoked immediately and all remaining data is deleted when Shopify sends the shop redaction webhook (48 hours later).

5. Contact

Questions about this policy: support@metercart.app.