YOUR DATA

Privacy notice

Last updated: 6 November 2026

Draft notice. Operator contact details, service providers, and operational retention information must be finalized before public launch.

Metafield IMEX is operated by WebComers Services and helps merchants move metafield definitions and metaobject data between Shopify stores. This notice describes how the app handles information while providing those functions.

Information processed

Installation and session information: store identity, granted permissions, access/refresh tokens, and session metadata. Shopify sessions may include merchant or staff names, email addresses, and user identifiers.
Migration content: definitions, metaobject entries, reference identifiers, image URLs, and settings included in an export or uploaded JSON. Merchant-authored content may contain personal information.
Privacy requests: Shopify compliance callbacks may include customer and order identifiers and customer contact details. These are processed to validate and handle the request.
Technical and support information: error information and any details you choose to provide when requesting help. Your hosting connection can also produce technical logs such as network and request metadata.

How information is used

Information is used to authenticate the installation, access the store permissions granted by the merchant, provide requested exports and imports, resolve supported references, process privacy requests, and respond to support inquiries. Only migrate content you own or are authorized to manage.

Migration files and Shopify data

The app processes uploaded migration files without persisting them as an upload archive or migration history. JSON exports and reports are downloaded to your device. Imported definitions, entries, and images are stored in the destination Shopify store and remain under the merchant’s control. Creating a metafield definition can also validate matching existing unstructured metafields and update their types in Shopify.

Service providers and disclosures

Shopify processes installation, authentication, store API, and referenced-image requests. The application hosting/database services process information required to operate the app. Support inquiries are handled by the configured support email service.

Retention and deletion

Session records are retained as needed to operate an installation. Session cleanup is handled on uninstall and valid shop-redaction callbacks, including stored tokens and staff fields. The app does not retain shopper/order record histories to export or erase in response to customer callbacks. Those callbacks do not delete merchant-owned resources within Shopify.

Copies you download are retained according to your own device and storage choices. Files shared with support are outside the transient upload process.

The retention arrangements for operational logs, backups, and support correspondence must be included in the finalized policy.

Access and security

Store operations require Shopify authentication. Privacy callbacks are verified using Shopify request signatures. Do not include access tokens, passwords, or unnecessary customer data in a support message.

Questions and privacy requests

For questions about data handling or to make an applicable access/deletion request, contact farrukh@webcomers.com. Store owners can also use Shopify’s customer privacy request tools. We may need sufficient information to verify a request and identify the relevant installation.

Changes to this notice

We update this notice when the app’s features, providers, or data practices change. The date above identifies the latest revision.