Privacy Policy

Last updated: June 13, 2026

This policy covers both the Merchant CSV Tools website (merchantcsv.com) and the CSV Import Fixer Shopify app. Our guiding principle is to handle the smallest amount of data possible: we do not sell data, we do not run advertising or third-party tracking on your store data, and we never store the contents of your product files.

The website

The free tools on this website (the validator, de-duplicator, and variant checker) run entirely in your browser. CSV files you drop into them are read and processed locally on your own device and are never uploaded to us or anyone else. We use privacy-friendly, cookie-less aggregate analytics (Cloudflare Web Analytics) to count page views; this does not identify you and does not see your files.

The CSV Import Fixer Shopify app

When you install the app, it operates inside your Shopify admin. Here is exactly what it touches.

What we store

• Your store's domain (e.g. your-store.myshopify.com) and an access token Shopify issues so the app can act on your behalf. The token is short-lived and stored only to make the API calls you ask for.
• Import records: for each import you run, we keep the operation's status, the number of rows, timestamps, and any error message. These let you see your import history and progress.

What we do NOT store

• The contents of your CSV or your product data. Your file is parsed and fixed in your browser. When you choose to import, the data is sent directly to Shopify's servers; it passes through our service only to hand it to Shopify and is never written to our database or logs.
• Any customer, order, or payment information. The app requests access only to products (read and write). It never reads your customers, orders, or financial data.

Permissions we request

The app asks for permission to read and write products — nothing else. Read access lets it check which products already exist (so it can skip or update them); write access lets it create and update products from your fixed file.

Where your data is processed

The app runs on Cloudflare (hosting and database) and communicates with Shopify to perform imports. These are the only third parties involved, and each acts solely to provide the service. We do not share your data with anyone else.

Data retention and deletion

When you uninstall the app, Shopify notifies us and we delete your stored access token and mark your store as uninstalled. Because we never store customer data, the mandatory Shopify privacy/compliance requests (customer data request, customer redaction, shop redaction) have no personal data to return or erase; we acknowledge them and confirm there is nothing held. You can request deletion of your remaining records (store domain and import history) at any time using the contact below.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page. Continued use of the app or website after a change means you accept the updated policy.

Contact

Questions about privacy, or a deletion request? Email [email protected].