01Who we are
Costwyn: Fix Missing Costs (“Costwyn”, “the app”) is a Shopify app made by Costwyn Apps. It finds product variants whose cost per item is blank or $0, shows how much recent revenue has no real cost behind it, and lets you fix costs in bulk with a preview and undo.
This policy explains what store data the app reads, why, where it is kept, for how long, and how it is deleted. When you install Costwyn, you (the merchant) decide what happens with your store data; we process it on your behalf, only to run the app for you.
Questions or requests: replydesk7+costwyn@gmail.com.
02What the app reads
Costwyn asks Shopify for three permissions (access scopes) and nothing else:
| Permission | What we read or change | Why |
|---|---|---|
| read_products | Products and variants: title, SKU, price, vendor, product type, status, product image link, inventory item ID and cost per item. | To find variants with a blank or $0 cost and suggest costs from similar variants. |
| write_products | The cost per item of the variants you choose. | Only when you apply a fix you have previewed, when you undo one, or when you turn on auto-apply for an auto-fill rule. |
| read_orders | Orders from the last 60 days (test orders excluded): order date, cancelled/test flags, and each line item's variant, SKU, quantity and discounted unit price. | To add up how much recent revenue each variant earned, so the costs that matter most come first. |
Other data
- Store identity: your store's myshopify.com domain and Shopify store ID, so we know which store the data belongs to.
- Access token: the expiring access token Shopify issues when you install, so the app can call Shopify on your behalf.
- Plan status: whether your store is on the Free or the Fix + Watch plan, which we read from Shopify. Shopify handles all billing; we never see card or payment details.
- Webhook records: when Shopify tells us a product or its cost was created or edited (Fix + Watch), we keep the event ID so the same event isn't handled twice.
- Support email: if you email us, we receive your email address and whatever you write.
03How we use it
We use store data only to provide the app's features to you:
- Scan your catalogue and show coverage, revenue with no real cost, and an estimated margin effect.
- Build fix previews, apply the costs you approve, and keep the before-and-after values so any batch can be undone.
- On Fix + Watch: re-checks every week you're active, and catches new or edited products as they happen. Show in-app alerts for new blank or $0 costs, and run the auto-fill rules you set (suggest-first; auto-apply only if you turn it on).
- Answer your support requests.
We don't sell or rent store data, don't use it for advertising, don't combine it with data from other stores, and don't use it to profile or make decisions about people. There are no analytics, tracking pixels or advertising cookies in the app or on this website.
04What we keep
To make history and undo work, the app's database keeps, for your store only:
- Scan results: the variant list with costs, and revenue totals per variant for the last 30 and 60 days. Order IDs, line items and order details are not stored.
- Fix batches: each variant's cost before and after a change, and whether it was applied or undone.
- Fix + Watch: variants currently missing a cost, your auto-fill rules, and the date of the last check.
- Your store session (store domain, access token and its expiry).
Order data is read in memory during a scan, added up per variant, and then discarded.
05How long we keep it
After deletion, copies can remain for a short time in our providers' systems: Neon keeps a database change history for restores (6 hours on our plan), and Render keeps app logs for 7 days. Our app logs contain store domains and event names, not product or order details. Support emails stay in our mailbox until you ask us to delete them.
06Security
- Encryption in transit: the app and this site are served only over HTTPS. Render provides and renews the TLS certificates and redirects HTTP to HTTPS. Connections from the app to the database use TLS, which Neon requires.
- Encryption at rest: the database is hosted by Neon, which encrypts stored data with AES-256.
- Access: only the Costwyn Apps team can reach the production database and hosting accounts. Keys and passwords live in the hosting provider's environment settings, never in code.
- Least access: the app asks Shopify only for the three permissions above and uses Shopify's expiring access tokens.
- Every Shopify request is checked: requests that claim to come from Shopify are verified with Shopify's signature, and invalid ones are rejected.
07Service providers
We use these providers to run Costwyn. Each one only stores or carries data so the app can work:
| Provider | What it does | Data |
|---|---|---|
| Render (Render Services, Inc.) | Hosts the app and this website. | Requests pass through it; app logs kept 7 days. |
| Neon (Neon, Inc.) | Hosts the app's Postgres database. | Everything listed under “What we keep”, encrypted at rest. |
| Google (Gmail) | Our support mailbox. | Only emails you send us. |
Shopify provides the platform, sign-in and billing under its own terms and privacy policy. The app and its database are hosted in the United States (Render and Neon, Oregon region). Google may process support email in the countries where it operates.
08Your choices and rights
- You can uninstall Costwyn at any time from your Shopify admin; deletion then follows the timeline above.
- You can ask us for a copy of your store's app data, or ask us to correct or delete it, at replydesk7+costwyn@gmail.com.
- If your customers contact you about their data, Shopify forwards their requests to us automatically. We don't hold their personal details.
09Changes and contact
If we change this policy, we'll update the date at the top. If a change materially affects how your data is used, we'll let you know before it takes effect.
Contact: Costwyn Apps, replydesk7+costwyn@gmail.com.