Tidy Data — Privacy Policy

Last updated: 23 July 2026

Tidy Data (“the app”, “we”, “us”) is a Shopify app provided by QADAN ANALYSIS CONSULTING PTY LTD (ABN 20 655 113 670), New South Wales, Australia. This policy explains what data the app accesses, how it is used, and how it is protected.

In short: Tidy Data reads your product and collection data to find inconsistencies, and — only when you approve a change — writes corrections back. It does not access your customers, orders, or payment data, and it does not store your catalog.

1. Data we access

With your permission (the read_products and write_products access scopes), the app reads product and collection information through the Shopify Admin API, including: product titles, product types, vendors, tags, status, price ranges, and collection membership and hierarchy. This is the only data the app requests.

The app does not request or access customer records, personal data, orders, checkout, payment, or financial information.

2. How we use it

Catalog data is used solely to compute consistency (which products or collections differ from their peers) and to display that analysis to you inside the app. When you review and explicitly approve a change, the app writes that specific correction back to your store via the Admin API. Nothing is changed without your approval.

3. Data storage & retention

We do not store your catalog. Product and collection data is read on demand and held only in memory for the duration of your session, then discarded. The only data we persist on our server is a Shopify session token, used to keep you authenticated; it contains no catalog or customer information.

4. Data deletion & GDPR

The app implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Because we store no customer personal data, customer requests are acknowledged as no-ops. When you uninstall the app or your shop is redacted, the associated session token is deleted.

5. Hosting & sub-processors

The app runs on Microsoft Azure (App Service). Azure acts as a hosting sub-processor. We do not sell, rent, or share your data with any third party for marketing or any other purpose.

6. Security

All communication with the app and with Shopify is encrypted in transit over HTTPS. Access is authenticated through Shopify’s session-token mechanism.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

8. Contact

Questions about this policy or your data: info@qadan.com.au. This policy is governed by the laws of New South Wales, Australia.