Privacy policy
GMVify Product Options ("the app") is a Shopify app that adds custom fields to product pages. It is provided by Vitamin Creative Lab Limited, trading as GMVify ("we", "us"). This policy explains what information the app handles when a merchant installs it, and what happens to information the merchant's shoppers enter. Questions go to support@gmvify.com.
Information about merchants
When you install the app, Shopify gives the app access to your store through the permissions you approve. We store on our servers:
- Your store's address (myshopify.com domain) and the access token Shopify issues to the app.
- Your plan (Free or Pro), billing period and trial end date, read from Shopify's billing.
- The products that currently get fields and the field settings that apply to them, so the app can list them for you.
- For orders that are missing a required entry or an add-on charge (Pro): the order's ID, number, date, total and currency, the product titles and which fields or charges are affected. This lets the app show these orders on your home page.
- The admin language a staff member picks in the app, stored with their Shopify user ID.
- Dates of milestones such as your first order with fields, used to time in-app prompts such as a request for a review.
Your field groups themselves (field names, options, prices, styles and translations) are saved in your Shopify store, as app data in metaobjects and product metafields, not on our servers.
Information about shoppers
Shoppers fill in the fields you create on your product pages. What they enter is added to the cart and the order as line item properties, inside Shopify. The app:
- reads each new order (through Shopify's order webhook) to copy the entries into the order note, add the order tag you choose and, on Pro, check that required entries and add-on charges are present;
- does not store shoppers' entries, names, email addresses, shipping addresses or payment details on our servers;
- for file fields (Pro), lets the shopper's browser upload the file straight to Shopify, which keeps it in your store's Files. Our server only asks Shopify for the upload link and registers the file. To limit abuse it keeps a short-lived count of uploads per IP address in memory, which is never written to disk;
- keeps what a shopper has typed in their browser's session storage, so the fields stay filled if the page reloads. This stays on the shopper's device and is cleared once the item goes into the cart, or when the tab is closed.
The app sets no cookies on your storefront and does not use shoppers' information for advertising or profiling.
Why we use this information
Only to provide the app: showing fields and prices on your storefront, charging add-ons and checking required fields at checkout through Shopify Functions, writing entries to orders, showing your plan and orders that need attention, translating your field text when you ask for it, and answering your support requests. We do not sell or rent any information.
Service providers
| Provider | What it does | What it receives |
|---|---|---|
| Shopify | Platform the app runs on | Everything above, under Shopify's own privacy policy |
| Render (United States) | Hosts the app's server and database | The merchant information listed above |
| Intercom | In-app support chat | Your store's address, name, Shopify store email and plan, and the messages you send when you open the chat |
| DeepSeek | Machine translation (Pro) | The text of your field groups (labels, options, help text) when it is translated into your store's languages. No shopper or order data |
| Cloudflare | Serves template images and this website, forwards email to our support address | Standard request data such as IP addresses, and emails you send us |
How long we keep it
- When you uninstall the app, its access token and session are deleted right away.
- Shopify sends a request to erase store data 48 hours after uninstalling; the app then deletes everything it stored for your store.
- Records of orders that needed attention stay until then, or until the store's data is erased.
- Support conversations are kept in Intercom and email for as long as needed to help you, and deleted on request.
Your rights
You can ask us for a copy of the information we hold about your store, or ask us to correct or delete it, by writing to support@gmvify.com. Shoppers who want to exercise their rights should contact the store they bought from; we handle Shopify's customer data and erasure requests, and since we hold no information about individual shoppers, there is nothing to return or delete on our side. Depending on where you live (for example in the EU, the UK or California) you may also have the right to complain to a data protection authority.
Security
Connections to the app use HTTPS. Access tokens and other data are kept in a database that only the app's server can reach, and the app asks Shopify only for the permissions it needs.
Changes
If we change what the app collects or how it's used, we'll update this page and the date above, and tell merchants in the app when the change matters to them.