Privacy Policy

Last updated: March 30, 2026

Metaobject Asset Packs ("the App") is operated by Hart & Heim Pty Ltd ("we", "us", "our"). This privacy policy explains how we collect, use, and protect information when you install and use our Shopify app.

What Data We Collect

We collect minimal data. The App stores only what is necessary to function:

• Shopify session tokens — temporary authentication tokens stored in our database to keep you logged in. These contain no personal information.
• Shop domain — your myshopify.com domain, used to identify your store for session management.

What Data We Do NOT Collect

• We do not collect customer personal information (names, emails, addresses, payment details)
• We do not collect browsing behaviour or analytics
• We do not use cookies for tracking
• We do not sell or share any data with third parties

Where Data Is Stored

All asset pack data (images, videos, documents, specifications, FAQ content) is stored in Shopify's metaobject system — within your Shopify store, managed by Shopify. We do not store this content on our servers.

Session tokens are stored in a SQLite database on our hosting provider (Railway). This data is encrypted in transit via HTTPS and is automatically deleted when you uninstall the app.

AI Image Analysis (Optional)

If you enable AI image analysis (Premium plan), images are sent to Anthropic's Claude API for categorisation. Images are processed in real-time and are not stored by Anthropic or by us after analysis. This feature is optional and disabled by default.

GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and handle all three mandatory Shopify webhooks:

• Customer data request — we confirm we hold no customer data
• Customer deletion — we confirm no customer data to delete
• Shop deletion — we delete all session records for the uninstalled store

Data Retention

Session tokens are retained only while the app is installed. When you uninstall the App, all session data is automatically deleted. Asset pack data stored in Shopify metaobjects is managed by Shopify's data retention policies.

Your Rights

You have the right to:

• Request access to any data we hold about your store
• Request deletion of your data (uninstalling the app achieves this)
• Ask questions about our data practices

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.

Contact Us

If you have questions about this privacy policy or our data practices, contact us at:

Email: walter.ceder@gmail.com
Company: Hart & Heim Pty Ltd