Privacy Policy

Guardrails Bulk Product Editor · Last updated 21 August 2026

Guardrails Bulk Product Editor (“the app”) helps merchants change product prices, compare-at prices, status and tags in bulk, preview those changes before they are applied, and undo them afterwards. This policy explains exactly what the app accesses, what it stores, and for how long.

The app does not collect customer data

The app requests a single Shopify access scope, write_products. It does not request, receive or store any customer, order, checkout or payment information. It never has access to the personal data of people who shop in your store.

What the app stores

• Your store’s domain and an access token, so the app can act on your store when you use it. The token is issued by Shopify and can be revoked at any time by uninstalling the app.
• A record of each bulk edit you run. For every product or variant affected this includes its Shopify ID, its title at the time of the edit, the value before the change, the value after the change, and whether the change succeeded, failed or was skipped.
• The filter and operation you chose for each edit, so the run is reproducible and can be undone.

The app uses offline access tokens, so it does not store the name, email address or other personal details of you or your staff.

Why this data is stored

The record of each edit is the app’s core function. It is what lets you see exactly what changed, export a receipt of it, and restore previous values if a change was wrong. Without it the app could not offer an audit trail or a reliable undo.

How long it is kept

• Edit history: 90 days. Records of bulk edits and their per-item details are deleted automatically once they are older than 90 days.
• Access tokens: until you uninstall. When the app is uninstalled, its session records for your store are deleted.
• Everything else: within 48 hours of uninstalling. Shopify notifies the app when a store is closed or removed, and all remaining data for that store — every edit record and its per-item details — is deleted.

Who else processes this data

• Shopify — the source of all product data the app reads and writes, and the platform the app runs inside.
• Railway — the hosting provider that runs the app and its database. Data is stored in the European Union (Amsterdam).

The app does not sell, rent or share your data with anyone else, and does not use it for advertising or analytics profiling.

Your rights

You can remove all data held by the app at any time by uninstalling it from your Shopify admin. The app also honours Shopify’s mandatory data requests: a request to view stored customer data, a request to erase customer data, and a request to erase shop data. Because the app holds no customer data, the first two are answered accordingly; the third deletes every record for your store.

If you would like a copy of the data held for your store, or want it deleted sooner, contact us and we will action it.

Changes to this policy

If the data the app stores ever changes, this page will be updated and the date at the top revised.

Contact

Questions about this policy or about data held for your store: bayram.naouar@gmail.com