Privacy Policy
Last updated: April 28, 2026
Overview
Theme Factory ("the App") is a Shopify app developed by Anatta Design ("we", "us"). This policy explains what data the App collects when you install it on your Shopify store, why we collect it, and how we handle it.
We do not collect, store, or process any customer personal information from your store.
What we collect
When the App is installed on your store, we store:
- Your Shopify store domain (e.g.
example.myshopify.com) - An OAuth access token issued by Shopify for the App
- The list of API scopes granted to the App
- Email addresses of team members you explicitly add to the "Store Access" list inside the App
We do not collect customer names, emails, addresses, orders, payment information, or any other end-shopper data.
How we use it
- The access token authenticates the Theme Factory CLI when it builds and pushes themes to your store on your behalf.
- Team-member emails control who can use the CLI against your store.
- The shop domain identifies your installation across our services.
Sharing and third parties
We do not sell or share your data. Data is processed by the following infrastructure providers strictly to operate the App:
- Shopify (OAuth, webhooks, Admin API)
- Our hosting and database provider for the App backend
Data retention and deletion
Data is retained while the App is installed. When you uninstall:
- We respond to Shopify's
app/uninstalledwebhook by deleting your session record. - We respond to Shopify's
shop/redactwebhook (sent 48 hours after uninstall) by deleting all remaining records tied to your shop, including the stored access token and the Store Access email list. customers/data_requestandcustomers/redactwebhooks are acknowledged as required by Shopify, but no customer data is stored, so no export or redaction is performed.
Your rights
You may request deletion of your data at any time by uninstalling the App or contacting us at the address below. As a Shopify merchant you may also exercise the data-subject rights granted by your local privacy laws (GDPR, CCPA, etc.).
Contact
Questions or requests: saurabh@anattadesign.com
Anatta Design — agentic.anatta.io