Privacy policy: Product Cockpit
Last updated: 20 October 2026
This policy covers Product Cockpit, an app for Shopify stores made by AgileNinjas Tech Pvt Ltd ("we", "us"). It explains what the app reads from your store, what it keeps, where, for how long, and how to have it erased.
Who this covers
- Merchants who install Product Cockpit on their Shopify store.
- Staff members of those stores who use the app.
- Your customers, only to say that the app keeps nothing about them.
For the data your store holds, you, the merchant, decide what is collected and why. We process it on your behalf to run the app.
What the app reads from your store
| What | Why |
|---|---|
| Products and variants: prices, SKUs, status, tags, the length of the description and the number of images | To record what changed, and to flag incomplete listings |
| Inventory levels, cost per item, and the locations that hold stock | For stock, runway, inventory value and margin |
| Orders and refunds | Only to total quantities, amounts, discounts and refunds per product |
| The signed-in staff member's Shopify user ID and name | To show who wrote a note, recorded a decision or changed a task |
If Shopify holds no name for a staff member, the app uses their email address as their name.
Customer data
The app does not request, store or display customer names, email addresses, postal addresses, phone numbers or payment details. Order data is reduced to per-product totals before anything is saved. The one exception is the unit cost at the moment of each sale, which is kept with its order and line item IDs so margin stays accurate. It carries nothing about the buyer.
Shopify's customer data and customer erasure requests are acknowledged. There is no customer-level data to return or erase.
Staff data
The app records which staff member did something, so your team can see who wrote or decided what. A staff member's name and Shopify user ID are recorded:
- as the author of a note,
- as the assignee of a task, which is a name typed in by whoever sets it,
- against each entry in a task's activity log,
- against a decision they recorded, and
- against an attention flag they snoozed.
Product change history does not record who made a change. It records what changed, from what, to what, and when.
Every staff member with access to the app can read every note. Only a note's author can edit or delete it. Notes written before 16 September 2026 recorded no author, so any staff member can edit those.
The app does not rank, score or rate staff. The Tasks page shows how many open tasks each assignee has, so work can be shared out. It does not total task activity by person.
Where your data is kept
| Data | Where |
|---|---|
| Notes, tasks and task activity | In your own Shopify store, as metaobjects |
| App settings and thresholds | In your own Shopify store, as a shop metafield |
| Computed product metrics | In your own Shopify store, as a product metafield |
| Product change history, and the last known product details used to detect changes | Our database |
| Decisions and their review results | Our database |
| Attention flags, and when your store was last checked | Our database |
| Unit cost at the time of each sale, with its order and line item IDs | Our database |
| The stats chosen for the product card, and cached figures | Our database |
| Your store's access token, issued by Shopify | Our database, so the app and its scheduled jobs can read your store |
Our database is separated by store. Every query is limited to the store making the request, so one store's data is never returned to another. The access token carries no staff names or emails.
Permissions the app asks for
| Permission | Why |
|---|---|
| Read products | To record changes and check listings |
| Write products | To save computed metrics on each product |
| Read orders | To total sales, discounts and refunds per product |
| Read inventory and locations | For stock levels and inventory value |
| Read and write metaobjects and their definitions | To store notes, tasks and task activity in your store |
Two optional permissions can be granted later and are never required. Read reports lets the app use Shopify's own sales figures for longer periods. Write analytics annotations would let the app mark your decisions on Shopify's charts. That feature isn't available yet.
How we use it
Only to provide the app's features to your store. We do not sell data, share it with advertisers, or use it to train models. We do not combine one store's data with another's.
Cookies
The app sets no cookies. Sign-in uses Shopify's session tokens.
How long we keep it
While the app is installed, we keep the data in our database for as long as it is useful to you, with no automatic expiry:
- Data about a product is deleted when you delete that product in Shopify.
- Records of background jobs, which name your store and the products a job worked on, expire after a day, or a week if the job failed.
- Operational logs name your store and product IDs. They contain no customer or staff details.
Erasing your data
On request, while the app stays installed. Email support@kazenlabs.com from the store owner's account, or ask a staff member with authority over the store to do so, and name the store's myshopify.com address. We erase everything we hold for your store in our database and reply with what was removed. The app keeps working and starts recording afresh from that moment. To stop the app collecting anything further, uninstall it.
When you uninstall. Your store's access token and scheduled jobs are removed straight away. Shopify then sends a store erasure request, normally 48 hours later. On that request we delete everything we hold for your store in our database. If the deletion fails, we report the failure so Shopify sends the request again.
Data in your own store. Notes, tasks, task activity, settings and metrics live in your Shopify store, not with us, and stay there if you uninstall. Once uninstalled, the app can no longer reach them. You can delete them in your Shopify admin.
Security
- The app is served only over HTTPS, and every request to Shopify is made over HTTPS.
- Each request is checked against Shopify's signed session token or webhook signature before any data is read or written.
- Every database query is limited to the store making the request.
Service providers
| Provider | What it does |
|---|---|
| Shopify | Hosts your store and the data the app writes into it |
| Railway | Runs the app, its database and its job queue, in its US West region |
These providers process data only to run the service on our behalf. Because the app runs in the United States, your store's data is processed there.
Your rights
If you are a merchant or a staff member, you can ask what we hold about you, and ask us to correct or erase it. Use the contact below. Where the data belongs to your store, we may confirm the request with the store owner first.
Changes to this policy
When this policy changes, we update the date at the top and describe what changed here.
Contact
AgileNinjas Tech Pvt Ltd
Privacy questions and requests: support@kazenlabs.com