Privacy policy

This policy covers the Kivli Product Options & Addons Shopify app. It applies to merchants who install the app and to shoppers who use product options on those stores.

• Store domain, store name, currency, and Shopify plan.
• The app plan, settings, option sets, and published versions of those sets.
• A Shopify session so the app can act for the store. That session can include the staff member’s name and email.

For an order that uses options, the app stores:

• The order id and order number.
• The order time, currency, and totals.
• The option names, choice names, and add-on prices used to check that checkout charged the right amount.
• Daily counts of how often each option was bought, and how much add-on revenue it brought.

Customer names, email addresses, and shipping addresses from the Shopify order are not copied into the app database. Text a shopper types into an option, such as an engraving or a gift message, is saved on the order in Shopify. The app’s order check stores the option name and the price.

When a product has an upload option, the file, its name, type, and size are stored. Files are kept in the store’s Shopify Files, or in Cloudflare R2 when the merchant has that storage turned on. A file that is attached to an order is kept until the merchant deletes it or the customer asks for their data to be erased. A file from a cart that never becomes an order is deleted after 7 days.

The product page sends anonymous counts: an option set was viewed, started, completed, or added to the cart. These counts are stored per store and per day. They are not tied to a person.

An A/B test keeps a random id in the shopper’s browser so the same visitor sees the same options on the next visit. That id stays in the browser. It is not sent to the app.

If a merchant uses the AI builder or label translation, the description they type and the option labels to translate are sent to Anthropic to produce a draft. The merchant reviews the result before it is published. Shopper orders are not sent to Anthropic.

• To show options on the product page and charge add-on prices at checkout.
• To show the merchant analytics, translations, and a check that the order total matches the options chosen.
• To answer a customer data request from Shopify, and to delete a store’s data after uninstall.

• Shopify, which hosts the store, the order, and files saved in Shopify Files.
• Cloudflare R2, when the merchant stores uploads there.
• Anthropic, when the merchant uses AI.
• Railway, which hosts this app.

Error reports, when enabled, include the error message only. They do not include request bodies or shopper data.

Store data is kept while the app is installed. Forty-eight hours after uninstall, Shopify asks the app to delete that store’s data, and the app deletes option sets, order records, analytics, sessions, and uploaded files.

When a customer asks Shopify to erase their data, the app deletes the option records and uploaded files for the orders Shopify names.

Questions about this policy: support@designflowdigitals.com