1. Summary
TrueBatch is a merchants-only tool. It helps Shopify merchants allocate freight, insurance, customs duty and broker fees across purchase batches to compute a true landed cost per SKU, and optionally write those costs back to their own store. TrueBatch never collects personal data from shoppers or end customers. All data we process belongs to the installing merchant.
2. What data we collect
- Store identity: the installing store's myshopify.com domain and plan status (free/Pro).
- OAuth access tokens: the Admin API tokens Shopify issues to the app, used only to read/write product cost data you ask us to write.
- Batch data you enter: SKUs, quantities, unit costs, weights, freight/insurance/duty/fee amounts, allocation settings and the computed results for each batch.
- Basic usage events: coarse in-app events (e.g. "opened the app", "saved a batch") used to improve onboarding. These contain no personal data.
We do not collect buyer/customer personal information, payment card data, or browsing behavior. We do not run advertising or third-party analytics trackers inside the app.
3. How we use data
- To provide the service: compute landed costs, store your batch history, and write approved cost changes back to your store.
- To manage your subscription through Shopify's Billing API (we never see your payment details — billing is handled entirely by Shopify).
- To provide support you explicitly request.
We do not sell, rent, or share your data with third parties. Data is stored on our managed servers (EU/US-hosted VPS) and is accessible only to the operator of the app.
4. Data retention & deletion
- Uninstall: your store's OAuth token is deleted immediately when you uninstall the app.
- Mandatory shop data deletion: when Shopify sends the mandatory
shop/redactwebhook (within 48 hours after uninstall), we permanently delete all remaining data for your store — batches, tokens, settings and usage events. - Backups: access-restricted server backups are kept for disaster recovery only and are rotated automatically; data deleted from the live system disappears from all backups within 14 days.
- Customer data requests: on a
customers/data_requestorcustomers/redactwebhook we confirm that TrueBatch holds no end-customer personal data and take no action beyond that, unless you (the merchant) instruct us otherwise.
5. Your rights (GDPR / CCPA)
Since all stored data belongs to the merchant, merchants can request a copy or deletion of their batch data at any time by emailing us. Requests are handled within 30 days. Shopify store owners remain responsible for their own customer data; TrueBatch processes none of it.
6. Security
Tokens are stored with file-level access restrictions, all traffic is served over HTTPS, access is authenticated per store, and destructive write operations require explicit in-app confirmation with a reviewable diff before anything is changed in your store.
7. Contact
Questions, data access or deletion requests: support@kivobay.com
Developer/operator: Kivobay — operator of truebatch.kivobay.com