Privacy Policy
Updated 26 September 2026
This Privacy Policy explains how Vendkit (“we”, “us”) handles data when a Shopify merchant uses Measurely (the “App”), an app that lets a store sell products by length, area, weight or volume, with the exact price set at checkout.
1. Who we are and our role
The App is operated by Vendkit. When a merchant installs Measurely, the merchant is the data controller and Vendkit acts as a data processor: we process data only to provide the App's features to that merchant, on their instructions. Our processing terms are set out in the Data Processing Addendum in our Terms of Service.
Shoppers who have questions about their personal data should contact the store they bought from.
2. Data we access in your store
Measurely asks Shopify only for the permissions it needs:
| Shopify data | Permission | Why we need it |
|---|---|---|
| Products | read_products, write_products | Show your products, save each product's measure settings on the product, and (only if you tick the box) set the product's displayed price per unit. |
| Checkout pricing and rules | write_cart_transforms, write_validations | Switch on Measurely's checkout functions that set the measured price and enforce your minimum, maximum and step rules. |
| Orders | read_orders | Build your cut list. We read the order number, the measured items, the amount paid and the order note — nothing else. |
3. Data we store
| What | Details | Kept for |
|---|---|---|
| Product settings | Units, price per unit, rules, stock unit and sample settings for each measured product. | Until you remove the product or uninstall. |
| Cut list | For each measured order line: the order number, product, amount, quantity, amount paid and the order note (cutting instructions). | 12 months, then deleted automatically. |
| Store settings | Your plan and setup-guide progress. | Until you uninstall. |
| Session details | The access token Shopify gives the App to act on your store. | Until you uninstall. |
Measurely does not store shoppers' names, email addresses, phone numbers, postal addresses or payment details. Because an order note can contain anything a shopper types, we delete cut-list entries whenever Shopify asks us to erase a customer's data.
4. Why we process it (legal basis)
| Purpose | Legal basis |
|---|---|
| Pricing measured items and enforcing your rules at checkout | Performance of our contract with the merchant |
| Building the cut list and sales figures in the App | Performance of our contract with the merchant |
| Keeping the App secure and fixing errors | Our legitimate interest in running a reliable service |
| Billing your plan through Shopify | Performance of contract |
5. Who we share data with
We never sell or rent data. We use these providers (sub-processors) to run the App:
| Provider | What they do | Location |
|---|---|---|
| Shopify | The platform the App runs on; source of product and order data; billing. | Canada / global |
| Railway | Hosts the App's servers. | United States (East) |
| Supabase | Database, encrypted at rest. | Canada (Montréal) |
| Sentry | Error monitoring. Personal data is removed from error reports before they are sent. | United States |
6. International data transfers
Data may be processed in Canada and the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the safeguards offered by our providers, such as the European Commission's Standard Contractual Clauses and Canada's adequacy decision.
7. Retention and deletion
- Cut-list entries are deleted automatically after 12 months.
- When you uninstall, Shopify switches off Measurely's checkout functions, and about 48 hours later asks us to delete your store's data. We then permanently delete everything we hold for your store.
- We act on all of Shopify's mandatory privacy requests: customer data request, customer redact and shop redact.
8. Cookies and your storefront
Measurely sets no cookies and uses no tracking on your storefront. When a shopper adds a measured item, the chosen amount is stored in the cart as a hidden line property (_measure, or _swatch for samples), which Shopify's checkout uses to price the item.
9. Your rights
Depending on where you live, laws such as the GDPR and CCPA give you rights to access, correct, delete, restrict or port your personal data, and to object to processing. Merchants can exercise these rights by contacting us or by uninstalling the App; shoppers should contact the store they bought from, which can ask us for help. You may also complain to your local data-protection authority.
10. Security
All data is sent over HTTPS and stored in encrypted databases. Every request from Shopify is verified with its signature before we act on it, access to production systems is limited to the App's operator, and we keep daily database backups.
11. Children
The App is a business tool for Shopify merchants and is not directed at children. We do not knowingly process children's data.
12. Changes to this policy
We may update this policy as the App changes. The “Updated” date at the top shows when it last changed; for significant changes we will notify merchants in the App.
13. Contact us
Vendkit — vendkit.support@gmail.com. We reply within one business day.