Privacy policy

Who runs Fieldloader

Fieldloader is made and run by Omni (askomni.app). Questions about this policy, or about anything Fieldloader holds for a store, go to hello@askomni.app.

What Fieldloader reads from Shopify, and what it keeps

Fieldloader asks Shopify for access to a store's products, inventory and locations, and for nothing else. It asks for no access to customers or orders, and reads neither.

It reads products and variants: titles, handles, SKUs, barcodes, prices, status, vendor and product type, each variant's unit cost, and how much of it is in stock at each location. It reads the store's locations by name, city and country, and the store's own name, currency and time zone. And it reads the metafield definitions on products and variants, and the values of the metafield a merchant exports, checks or imports.

It writes to Shopify only what a merchant has asked for: the metafield values in a file they checked and applied, the earlier values when they roll that import back, and a metafield definition when they make one in the app.

It keeps the store's domain, name, currency and time zone, and the access token Shopify gives it when it is installed. The token is the store's, not a person's: Fieldloader keeps no staff member's name or email address.

It keeps a copy of the catalogue it read, brought up to date as Shopify reports changes, for as long as the app is installed. With it is a log of changes to stock levels, whose entries are deleted once they are 180 days old.

It keeps each export: the id, handle, SKU and value of every product or variant, for the metafield that was exported. Exports are kept for as long as the app is installed.

It keeps each import: a snapshot of that metafield across the store, taken just before the import, and for every value written, what it was and what it became. That is what a rollback writes back. The last 10 imports and rollbacks are kept with their snapshots, and an older one is deleted when a new one starts.

It keeps the file last checked on the Import screen, exactly as it was uploaded. There is one per store, and checking another file replaces it.

It keeps a note of whether the store has answered its request for a review, so that it asks once. And it keeps the id and kind of each notice Shopify sends it, so that a repeated one is not applied twice, deleting those more than 7 days old as new ones arrive.

Where it runs

Fieldloader runs on Fly.io, in Fly.io's iad region (Ashburn, Virginia, United States). Its database is Postgres, hosted by Neon in AWS us-east-1 (Virginia, United States). Everything listed above is kept in that database.

Fly.io also holds the app's logs. They name a store by its domain and record what the app did and what went wrong.

When the app is uninstalled

When a store uninstalls Fieldloader, Shopify sends app/uninstalled. Fieldloader then deletes the access token and its copy of the catalogue at once: products, variants, stock levels, the stock log and locations. Nothing more is read from the store.

The exports, the imports and their snapshots, the last checked file, and the record that the store was installed are kept until Shopify sends shop/redact, 48 hours after the uninstall. A store that reinstalls before then finds its import history where it was. shop/redact deletes everything Fieldloader holds for the store, except the record that each such request was carried out. That record names the store and the kind of request, and no person.

customers/data_request and customers/redact are Shopify's requests for what an app holds about one of a store's customers, and for it to be erased. Fieldloader holds nothing about any customer, so it has nothing to hand over and nothing to erase; it records that the request came and was answered.

The metafield values Fieldloader wrote, and any definition it made, belong to the store and stay in Shopify.

Billing

The paid plan is charged by Shopify, through Shopify's own billing, on the store's Shopify invoice. Fieldloader never receives a card number or any other payment detail, and stores none. It asks Shopify whether the store has an active subscription when it needs to know, and keeps no billing record of its own.

Analytics and other companies

Fieldloader uses no analytics, no advertising and no tracking of any kind.

Three companies handle what this policy describes, and no others: Shopify, which the data comes from and goes back to; Fly.io, which runs the app; and Neon, which runs its database. Fieldloader's pages load a typeface, and inside the Shopify admin Shopify's own scripts, from Shopify's servers.

Fieldloader does not sell what it keeps and shares it with no one else. It uses it only to export, check, import and roll back metafields in the store it came from.