What this covers
This policy explains what the metangelo app, made by Tellship ("we", "us"), reads from your Shopify store, what it keeps, why, for how long, and how to have it removed. It covers the app only. The tellship.com website has its own privacy policy.
metangelo is a bulk editor for your product variants, products, orders and stock levels, and for their metafields. Everything it keeps exists to do that job and to show you what it did. How that data is protected is in the data protection policy.
What the app can reach in your store
The app asks Shopify for each permission inside the app, the first time a screen needs it, and not before. A store that never opens a screen is never asked for its permission.
- Products (read and write): your products, variants and their metafields, and the fields the app edits on them, such as price, SKU, weight, description and SEO.
- Orders (read and write): orders from the last 60 days only. The app reads each order's number, date, payment and fulfilment status, and the fields you choose to edit: the note, tags, PO number and order metafields. It does not read the customer's name, email, phone or address.
- Inventory (read and write): the available quantity of each variant at the locations you choose.
- Locations (read): each location's name and city, to head the columns of the stock grid. Shopify's permission window describes this permission as "View staff and contributor data"; the app reads no staff or owner data with it.
- Files (read): the names and previews of the files in your store, only when you fill a metafield that holds a file.
It asks for nothing else: no access to customers, payments, or your staff accounts beyond what Shopify tells every app about who opened it.
What it writes. The app writes to your store only when you commit staged edits, revert a commit, or confirm a change it asks you about. It writes only the cells you changed, and reads each value back afterwards to confirm it landed.
What the app keeps
The app keeps its records in a database we host. Each record is tied to your store's myshopify.com domain.
- Your store's session. The access token Shopify issues so the app can act on your store, and what Shopify tells the app about the staff member who opened it: a name, an email address, a locale, and whether they own the account. This is the only personal information the app holds.
- Your choices. Which metafields you chose as columns, and which fields you told the dimensions template hold length, width and height.
- Staged edits. For each edit you have staged and not yet committed: the ID of the variant, product or order, the two lines that name its row (for a variant, its product's title, options and SKU; for an order, its number, date and status), the field, and the value you entered. For a stock level, the location's ID and the count.
- Commits and reverts. For each commit and each revert: every cell it touched, with the row's ID and the lines that name it, the field, the value before, the value written, and the value read back; the outcome of each row; and when it ran. This is what lets the app show you what happened and put values back.
- Files. When you export a CSV file of variants, products or orders, the app keeps the last file it made for that kind so you can download it; it holds the rows' IDs, the lines that name them, and the values of your chosen fields. When you import a file, the app keeps the file's name, its counts, and the rows it skipped with the reason for each, so you can download them. It does not keep the rest of the file you uploaded.
- Jobs. The progress of a commit or revert that runs in the background, so it can be paused, resumed and reported.
- When your store first opened the app. One date, so we can measure whether the app is useful.
- Your plan. The app reads which plan your store is on from Shopify. Billing is handled entirely by Shopify: the app never sees a card number or a payment.
An order's note, tags, PO number and metafields are whatever you or your staff typed into them, and a note can hold a customer's own words. The app keeps them only as listed above.
Our hosting provider also keeps ordinary server logs, which record your store's domain alongside each request the app handles, for security and to keep the app running.
Customer data
The app reads no customer field: no name, email, phone number or address. Orders count as customer data under Shopify's rules all the same, and an order's note or metafields can hold whatever was typed into them.
When Shopify sends a customer redaction request on your behalf, the app deletes, for each order the request names, its staged edits and the cells of its commits and reverts, and deletes your store's last orders file and the skipped rows of its orders imports. If a commit, revert, export or import is running at that moment, the app records the order numbers and deletes as soon as it ends.
When Shopify sends a customer data request, the app returns nothing of its own: what it holds of an order is the note, tags, PO number and metafields that you can read in your own Shopify admin.
How we use it
- To show you your variants, products, orders and stock levels and their values, stage your edits, write them to your store, read them back and report each row's outcome.
- To let you revert a commit, which needs the values as they were before it.
- To count the values written and read back each month against your plan.
- To answer a support request, where you ask us to look at what the app did.
- To keep the app secure and running.
We do not sell your information, share it with anyone for marketing, use advertising trackers, or run analytics that profile you or your staff. The app sends nothing to any service other than Shopify, the provider that hosts it, and the storage that holds its encrypted backups.
Where it is kept, and who can see it
The app and its database run on Railway, a hosting provider, in the United States (Virginia), in a database of our own. Encrypted backups of the database are kept in Cloudflare R2. Only the Tellship engineer who runs the app can read the app's records, when needed to support you or to fix a fault, and for nothing else. Shopify sees what any app's requests show it, under Shopify's privacy policy.
How long we keep it, and deletion
While the app is installed, the app keeps its records so you can review past commits and revert them.
When you uninstall the app, Shopify tells us, and the app deletes your store's session and access token straight away. Forty-eight hours later Shopify sends the app a store redaction request, and the app deletes everything else it holds for your store: your choices, staged edits, commits, reverts, files, jobs, pending redaction requests and the first-seen date. Backups taken before then still hold those records until they are replaced on the backup schedule.
At any time, you can ask us to delete what the app holds for your store, or to tell you what that is, by writing to metangelo-support@tellship.com. Hosting logs are kept by the provider for a limited time and are not used to identify you.
Your rights
You can ask us to show you, correct or delete the information the app holds about your store or your staff, subject to records we are required to keep. Write to metangelo-support@tellship.com and we will respond. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your data protection authority.
Changes to this policy
If this policy changes, we will update this page and the date at the top. A change that affects what the app keeps or how long it keeps it will be announced in the app.
Contact
Tellship · Bengaluru, India
metangelo-support@tellship.com