Theme Factory by Anatta

Privacy Policy

Last updated: April 28, 2026

Overview

Theme Factory ("the App") is a Shopify app developed by Anatta Design ("we", "us"). This policy explains what data the App collects when you install it on your Shopify store, why we collect it, and how we handle it.

We do not collect, store, or process any customer personal information from your store.

What we collect

When the App is installed on your store, we store:

  • Your Shopify store domain (e.g. example.myshopify.com)
  • An OAuth access token issued by Shopify for the App
  • The list of API scopes granted to the App
  • Email addresses of team members you explicitly add to the "Store Access" list inside the App

We do not collect customer names, emails, addresses, orders, payment information, or any other end-shopper data.

How we use it

  • The access token authenticates the Theme Factory CLI when it builds and pushes themes to your store on your behalf.
  • Team-member emails control who can use the CLI against your store.
  • The shop domain identifies your installation across our services.

Sharing and third parties

We do not sell or share your data. Data is processed by the following infrastructure providers strictly to operate the App:

  • Shopify (OAuth, webhooks, Admin API)
  • Our hosting and database provider for the App backend

Data retention and deletion

Data is retained while the App is installed. When you uninstall:

  • We respond to Shopify's app/uninstalled webhook by deleting your session record.
  • We respond to Shopify's shop/redact webhook (sent 48 hours after uninstall) by deleting all remaining records tied to your shop, including the stored access token and the Store Access email list.
  • customers/data_request and customers/redact webhooks are acknowledged as required by Shopify, but no customer data is stored, so no export or redaction is performed.

Your rights

You may request deletion of your data at any time by uninstalling the App or contacting us at the address below. As a Shopify merchant you may also exercise the data-subject rights granted by your local privacy laws (GDPR, CCPA, etc.).

Contact

Questions or requests: saurabh@anattadesign.com

Anatta Design — agentic.anatta.io