XML Import Privacy Policy

Last updated: September 14, 2026

XML Import ("the App") is developed and operated by Commerslab ("we", "us"). This policy explains what data is collected and how it is processed when the App is installed on a Shopify store.

Data we collect

• Store data: the store's domain, Shopify access token, and granted permission scopes.
• XML source data: the XML feed URLs added by the user, sync intervals, and field/metafield mappings.
• Import logs: the date, duration, per-product success/failure status, and error messages for each run — kept for troubleshooting purposes, with only the most recent 30 runs retained.

The App does not store personal data belonging to customers who place orders or visit the store.

Data storage and security

All store data (source definitions, mappings, import records) is stored per-store in a PostgreSQL database.

Data retention and deletion

• When a store uninstalls the App (app/uninstalled), the store record is marked inactive and session data is deleted.
• When Shopify's shop/redact webhook is received (approximately 48 hours after uninstallation), all data for that store is permanently deleted from the database.
• Only the most recent 30 import runs are kept per XML source; older runs are automatically deleted.

Third parties

The App only accesses the Shopify Admin API connected by the store owner and the XML feed sources defined by the user, solely for the purpose of creating products.

Contact

Questions about this policy or your data can be sent to info@commerslab.com.