SureEdit Privacy Policy
Effective 4 August 2026
SureEdit performs verified bulk edits on the products you choose and keeps the minimum store data needed for history and undo. This policy explains that data plainly: what we use, why we use it, and when it is erased.
This policy applies to the SureEdit app installed on your Shopify store. In this policy, “merchant” means the person or business using that store.
What SureEdit accesses
SureEdit requests only the Shopify access scopes needed for bulk product editing: read_products and write_products. The app reads the current values of the products and variants you select, writes the changes you request, and re-reads those values to verify that each change landed correctly.
SureEdit does not request customer names, emails, addresses, order data, or payment data. It does not use analytics or advertising trackers, and it does not sell your data.
What SureEdit stores
To run and verify bulk edits, SureEdit stores the following data, keyed to your shop domain:
- Edit journal. Operation and OperationItem records identify the products or variants targeted, the field changed, the old and new values, and the write and verification outcome. This product data makes history, verification, and one-click undo possible.
- Shopify session. Shopify provides an offline access token and shop identifier at install so SureEdit can call the Admin API on your behalf.
- Feedback you send. An in-app report stores its category, message, current page, and—when relevant—the operation ID. We attach no product values. If you type an email address or other contact detail into your message, that information is provided voluntarily so we can reply.
- Review-prompt status. A per-shop record notes whether Shopify displayed the native app-review prompt, or whether a previous prompt was dismissed, so SureEdit does not repeatedly ask. It contains no customer information.
Where it is stored
SureEdit runs on Vercel and stores the data above in a PostgreSQL database hosted by Supabase. Data is transmitted over encrypted HTTPS/TLS connections. These providers process data only to host the application and database; SureEdit does not permit them to use it for advertising or their own marketing.
How long it is kept
Operation history is retained according to your plan: 30 days on Free and one year on Growth and Pro. SureEdit automatically prunes edit-journal records after that window. The Shopify session, review-prompt status, and feedback records are kept while the app is installed, unless you ask us to delete them sooner.
How it is deleted
When you uninstall SureEdit, its access to your store ends and the active Shopify session is removed. SureEdit then honours Shopify's mandatory data-protection webhooks:
- shop/redact, normally sent about 48 hours after uninstall, erases all store data: operations, journal items, sessions, feedback, review-prompt status, and the uninstall marker.
- customers/redact and customers/data_request are acknowledged as required. SureEdit does not collect customer personal data, so there is no customer record to erase or return.
As a safeguard, if Shopify's shop/redact webhook is not delivered, SureEdit records an uninstall marker and purges the store's data no later than 30 days after uninstall, unless the store reinstalls the app first.
Your rights
You can request access to or deletion of your store's data at any time. Uninstalling the app starts the automatic deletion process; you can also contact us for an earlier manual request.
Changes to this policy
If this policy changes materially, we will update the effective date above and, where appropriate, notify merchants through the app.