Privacy Policy
Who we are
Reweigh is a Shopify app that audits product catalogs for shipping data-quality issues (missing weights, implausible weights, duplicate variant dimensions) and lets merchants apply suggested corrections in bulk.
Operator: [Your legal entity name]
Contact: pocketbrewcoffee@gmail.com
What data we access
When a merchant installs Reweigh on their Shopify store, the app requests these Admin API scopes:
| Scope | Why |
|---|---|
read_products, write_products | List products + variants, write updated weights |
read_inventory | Read inventoryItem.measurement.weight per variant |
read_orders | Count recent orders per product (last 30 days) for the "revenue at risk" metric |
The read_orders scope grants visibility into protected
customer data under Shopify's policy. We have requested only the
minimum: we read the product ID and quantity
of each order's line items. We do not read, store, or transmit
any customer name, email, phone number, shipping address, billing
address, payment method, or other identifying field.
What data we store
| Stored | Purpose | Retention |
|---|---|---|
Shop domain (e.g. acme.myshopify.com) | Identify which merchant a request is for | Until uninstall |
| Admin API access token | Authenticate to Shopify on the merchant's behalf | Until uninstall |
| Per-fix audit log (product ID, variant ID, old weight, new weight, timestamp) | Allow the merchant to review and undo recent changes | 90 days |
We do not store:
- Order rows, line items, customer records, addresses, or any PII
- Product images, descriptions, or pricing beyond what's needed during a single in-progress scan
- Per-shopper analytics, session recordings, or behavioural data
What data we transmit to third parties
| Third party | What we send | Why |
|---|---|---|
| Anthropic / OpenRouter (LLM provider) | Product title + product type + (truncated to 400 chars) product description | Estimating typical shipping weight for products our category lookup tables don't cover |
We send only the three fields above. No order data, no customer data, no merchant identity, no access tokens. OpenRouter's data retention policy applies; see openrouter.ai/privacy.
Data deletion
Reweigh responds to all three of Shopify's mandatory compliance
webhooks (shop/redact, customers/redact,
customers/data_request):
customers/redact— We acknowledge. Since we don't store any customer data, there's nothing to delete.shop/redact— We acknowledge. The merchant's access token and per-fix audit log are removed.customers/data_request— We acknowledge. We respond confirming that no records for that customer exist in our systems.
Merchants can also force a complete data wipe by uninstalling the app;
the app/uninstalled webhook triggers the same cleanup.
Security
- All data transmits over TLS 1.2+.
- Access tokens are stored in an encrypted-at-rest SQLite database on the Railway-hosted backend service.
- The Shopify Client Secret used for OAuth + webhook HMAC verification is stored only in Railway's secrets store; it never appears in source control or logs.
- Webhook authenticity is verified via HMAC-SHA256 signature check on every inbound request.
Cookies and tracking
The Reweigh dashboard does not set cookies, run analytics scripts, or embed third-party trackers.
Changes to this policy
If we materially change what we collect or how we use it, we will update the "Last updated" date at the top and email the contact address on file for each merchant install.
Contact us
Questions, concerns, or data-request inquiries: pocketbrewcoffee@gmail.com