Product Timeline Privacy Policy
Last updated: July 2026
Introduction
Product Timeline ("we", "our", "us") helps Shopify merchants view product change history on product details pages and in an admin history browser. This Privacy Policy explains how we collect, use, store, and delete data when you install and use the app.
Information We Collect
We access and process information needed to provide product change chronicles:
- Shop and Account Data: Shop ID, shop name, domain, contact details, locale, timezone, installation status, and Shopify plan information used to authenticate your store and operate the app.
- Product and Variant Data: Product and variant identifiers, titles, descriptions, handles, status, vendor, product type, tags, options, prices, compare-at prices, SKUs, barcodes, inventory-related fields, category, templates, timestamps, and related catalog fields synced from Shopify.
- Collection, Media, and Selling Plan Data: Collection membership and titles, product media metadata (such as IDs, URLs, and alt text), and selling plan group associations used to detect and display changes.
- Change History Data: Timeline events we create for baselines and field changes, including event type, field path, old and new values, timestamps, source (for example webhook or sync), and links to the related product or variant.
- Subscription Data: Shopify app subscription status, plan name, trial usage, billing interval, and subscription identifiers. Charges are handled through Shopify App Billing; we do not store payment card numbers.
Information We Do Not Intentionally Collect
- Payment card numbers or payment credentials
- Order, fulfillment, or return records
- Storefront visitor analytics or browsing behavior
- Customer passwords or Shopify account passwords
- Dedicated Shopify Customer records via a customer API scope
- Data unrelated to product change history or app subscription workflows
How We Use Your Data
- To sync and monitor product, variant, collection, media, and selling-plan updates from Shopify.
- To create and store timeline events that show what changed, when it changed, and the previous versus new values.
- To display recent history on the product details admin block and in the product history browser.
- To manage app access, subscriptions, trials, troubleshooting, security, and compliance.
Where Data Is Stored and Processed
Product Timeline uses Shopify for store data, authentication, and app billing. We use Gadget.dev as our application hosting, database, synchronization, and backend processing provider. Synced Shopify catalog copies and custom timeline event records may be stored in that infrastructure. Data may be processed in the locations where these providers operate their services. We do not sell your data.
Data Sharing
We share data only as needed to operate the app, comply with law, protect our services, or respond to a valid legal request. Our service providers process data on our behalf and are not authorized to use it for their own independent marketing. We do not share merchant or customer data with data brokers or advertising networks.
GDPR and Shopify Compliance
We support Shopify's mandatory compliance webhooks:
- customers/data_request: We process valid requests. The app's custom timeline models are product-scoped and do not store dedicated end-customer PII fields.
- customers/redact: Custom timeline records are not keyed to Shopify customer profiles. We process the request and confirm when no customer-scoped custom records require deletion.
- shop/redact: We delete shop-scoped timeline events and related app-managed records from our application database.
Data Retention and Deletion
- Active Use: Product timeline events and synced catalog data needed for history are retained while the app is installed so merchants can review change history. There is no automatic short-term expiry for active installs.
- App Uninstallation: When the app is uninstalled, we initiate deletion of shop-scoped custom Product Timeline data from our application database.
- Shop Redaction: We process Shopify's shop/redact request to purge the shop-scoped custom data listed above.
- Shopify Data: Data stored in Shopify remains subject to Shopify's controls and retention practices.
Security
We use access controls, shop-scoped authorization, authenticated Shopify connections, and managed infrastructure to protect app data. No method of storage or transmission is completely secure, but we take reasonable measures designed to prevent unauthorized access, alteration, disclosure, or loss.
Contact
Questions or privacy requests? Contact us.