Privacy Policy

Last updated: October 4, 2026 · Operated by NerdLabs (Joren Winge)

PruneKit is a Shopify app for print-on-demand and other large-catalog stores: it reads the store's orders, sorts each design (product) by what it has sold, and lets the merchant hide (set to draft), unhide, tag or untag designs in bulk, with every change recorded and undoable. This policy explains what data the app processes, why, and how it is protected.

No shopper data. PruneKit reads the store's orders to count what each product sold, but it does not request or store any customer's name, email, phone number or address. From each order it keeps only which products sold, how many, and for how much.

What we process

• Merchant / store data: the store's myshopify.com domain, an expiring Shopify access token, and the subscription plan tier.
• Store owner's email: the email address on the store owner's Shopify account (as set in Shopify, not the store's public contact email), its admin language, and whether it is a development store — used only to email the store owner: account alerts, a one-time welcome note on upgrading to a paid plan, and a one-time note after uninstalling asking what we could improve.
• Products: for each product, its ID, title, handle, tags, status (active, draft or archived), image link, whether it is on the Online Store, and when it was created and published.
• Order line items: for each order, the order ID, the day it was placed, and for each product in it the product ID, the units sold and the revenue, net of refunds and removed items. No customer fields are read or stored. Test orders are not counted.
• Change history: each change PruneKit makes at the merchant's request (hide, unhide, tag or untag), the product it applied to, what the product looked like before (so it can be undone), and when it was made and undone.
• App settings and bookkeeping: the store's language, install date, sync progress, and whether the app has asked for a review. None of it is about a person.

Why we process it

Solely to provide the app's functionality to the merchant: sorting the store's designs by sales, breaking sales down by tag, making the bulk changes the merchant asks for, and undoing them. The store owner's email is used only for the emails described above. We do not use it for advertising, profiling, or sale.

Sharing

• Shopify — the platform APIs the app is built on.
• DigitalOcean — hosts the server and database.
• Mailgun — our email provider; delivers our emails to the store owner (sent from support@nerdlabs.us), using the store owner's email above.

We do not sell data or share it for any other purpose.

Retention and deletion

Product and sales data is refreshed from Shopify while the app is installed; products removed from Shopify are removed from PruneKit. The change history is kept while the app is installed. When the app is uninstalled, sessions and access tokens are removed; roughly 48 hours later Shopify sends a shop/redact request and we delete all data stored for that shop, including the store owner's email. Because we hold no customer personal data, the customers/redact and customers/data_request webhooks have nothing to act on and are acknowledged. Changes already made to the store's products (for example, designs set to draft) remain in Shopify.

Security

Data is stored on a DigitalOcean server, on a dedicated storage volume that is encrypted at rest, with SSH-key-only administrative access. The database is backed up hourly to the same volume, and each backup is kept for 7 days, so data deleted from PruneKit is gone from its backups within 7 days. All traffic uses HTTPS. App secrets are held only in the server environment.

Changes

We may update this policy; material changes will be reflected here with a new "last updated" date.

Contact

Questions about this policy or your data: support@nerdlabs.us.