SampleMate Product Samples privacy

Operator and contact

Contact us about access, correction or deletion of app data. If you email support, we use the information you provide to respond to your request. Do not include access tokens, customer details or cart contents.

Data used to operate the app

The embedded app reads product identity, title, images, variant identity, SKU, administrative price, inventory eligibility and publication information to let an authenticated merchant manage sample mappings. Shopify remains the source for products, pricing and inventory. App writes are restricted to its own product mapping and bounded sample-eligibility metafields, plus installation entitlement metadata. The app does not change merchant prices, inventory or product settings.

The app stores encrypted Shopify sessions and access tokens, which may include authenticated merchant-user details. It also stores shop and installation identifiers, subscription status, mapping dependency identifiers, eligibility checks, setup progress and chosen theme identifiers, webhook receipts and operation locks. These records support authentication, app access, sample checks and setup.

Shopper privacy

The app requests no customer or order scopes and collects no shopper identities, order histories or cart contents in telemetry. The sample block reads Shopify’s current product data in Liquid. When JavaScript is available, it sends the mapped sample and quantity one directly to Shopify’s cart API; otherwise it uses the native cart form. Shopify and the merchant’s store privacy policies govern their cart, checkout and fulfillment data.

Shopify handles authentication, app subscription billing, cart and checkout. The app sends product and installation queries to Shopify and verifies subscription status through Shopify’s Partner API. Shopify and the merchant govern their own platform, payment and storefront data.

Hosting and backups

Production hosting is provided by Hetzner in Germany. Database backups are retained for up to seven days. Deleted data can remain in an existing backup until that backup expires; a database deletion does not immediately erase older backup copies.

Diagnostics and retention

Diagnostics record fixed event and status codes, pseudonymous shop references, timing and aggregate check/request counts. They do not include tokens, request bodies, product titles or cart contents. The maintenance worker removes diagnostics and webhook receipts older than 30 days, and inactive installation metadata after 30 days when no unresolved operation lock remains. Uncertain-write locks and their inactive installation record remain until the operation is reconciled. Timing depends on the worker running successfully.

Uninstall and deletion

When it processes a verified uninstall notification, the app stops background checks and removes stored sessions. Remaining operational shop data is deleted through the documented uninstall/privacy lifecycle. Shopify controls deletion of app-owned definitions and asynchronous cleanup of retained mapping values. Our app does not delete main or sample products or change their prices, inventory or settings. Review Shopify’s uninstall dialog: Shopify may archive app-created products. Restoration after reinstall is not guaranteed.

Merchants can export mappings and remove selected mappings before uninstalling. Shopify’s mandatory privacy requests are authenticated and handled without collecting shopper records. For questions about app data or deletion, contact the operator above.

Your rights

Where applicable, you can request access to your personal data, correction of inaccurate data, deletion, restriction of processing or a portable copy. You can also object to processing where that right applies.

Contact the operator above to exercise these rights. You may also lodge a complaint with a competent data protection authority.

• Information about data protection rights
• Find a data protection authority

Questions

Contact and support instructions. Do not send credentials, session links, customer details or cart contents.