Privacy Policy

High Stitch (“High Stitch,” “we,” “our,” or “us”) provides a Shopify application for product personalization and production workflow management. This Privacy Policy explains how we collect, use, share, store, and protect information when merchants install or use the App.

We collect only the minimum personal data required to provide value to merchants.

Merchant / Store Information

• Shopify store name and store domain;
• merchant contact details and support communications;
• authentication and access data necessary to connect the App to a Shopify store;
• app settings, preferences, and workflow configuration; and
• logs or metadata necessary for support, performance, and security.

Order and Production Information

• order identifiers and order status information;
• product titles, variants, and personalization settings;
• customer names associated with orders; and
• production-related metadata needed for embroidery or personalization workflows.

What we do not intentionally collect

• customer email addresses, phone numbers, or shipping addresses, unless a merchant specifically enables a feature that requires them or law requires their processing;
• payment card details, unless handled directly by a payment provider outside the App; and
• sensitive personal data unless a merchant explicitly submits it and such processing is necessary for the requested service.

We use information only for the purposes described in this Policy and in the App listing, including to:

• authenticate merchants and connect their Shopify stores;
• provide product personalization and production workflow features;
• identify orders and generate embroidery or artwork production outputs;
• sync app settings and relevant Shopify data;
• respond to support requests;
• maintain security, prevent abuse, and troubleshoot issues; and
• improve the reliability and performance of the App.

We use PostHog Analytics and Google Analytics (via Google Tag Manager) to understand how merchants interact with the App, monitor feature usage, identify errors, and improve the overall performance and user experience. These providers may collect information such as pages viewed, feature interactions, browser and device information, session activity, and other technical usage data. This information is used solely for analytics, troubleshooting, and product improvement.

We do not use personal data for unrelated purposes and we do not sell personal data.

Merchants are responsible for obtaining any required customer consents for the data they submit to the App. We respect merchant decisions and use data only within the permissions granted through Shopify and the merchant’s configuration. We do not sell customer data and we respect opt-out choices where applicable.

We do not sell, rent, or trade personal information. We may share information only:

• with trusted third-party service providers, including analytics providers such as PostHog and Google (Google Tag Manager / Google Analytics), that help us operate, secure, monitor, and improve the App
• to comply with law, regulation, subpoena, court order, or other valid legal process;
• to protect the rights, security, and integrity of High Stitch, Shopify merchants, customers, users, or the public; and
• in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate protections.

Service providers are required to protect data and use it only as necessary to provide services to us.

High Stitch processes Shopify data only as authorized by the merchant and only to provide the services described in the App listing and documentation. We support Shopify compliance processes, including the following privacy-related webhooks:

• customers/data_request
• customers/redact
• shop/redact

We respond to valid privacy requests as required by Shopify and applicable law.

We retain information only for as long as necessary to provide the App, comply with legal obligations, resolve disputes, enforce agreements, and maintain required records. When a merchant uninstalls the App or when we receive a valid redaction or deletion request, we delete or redact data in accordance with Shopify requirements and applicable law.

Following the uninstallation of the High Stitch App from a Shopify store, we retain order information and personalized product data associated with the merchant’s store for 30 days. This retention period allows us to support necessary operational, technical, and data-recovery requirements. After the 30-day retention period, the applicable data will be securely deleted from our systems, subject to any legal or regulatory obligations requiring longer retention.

We use reasonable technical and organizational safeguards to protect information, including:

• HTTPS/TLS encryption for data in transit;
• encryption at rest or encrypted storage where applicable;
• encrypted backups where supported by the hosting environment;
• restricted access to production data and systems;
• separation of test and production environments where practical;
• authentication and role-based access controls; and
• logging and monitoring for security and operational visibility.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Access to personal data is limited to authorized personnel who need access for support, operations, development, security, or legal compliance. Staff accounts should use strong passwords and, where available, multi-factor authentication and password managers.

High Stitch does not make legal or similarly significant automated decisions about customers. No customer will be subject to a legally significant automated decision by the App.

Depending on the location of our hosting providers, support tools, or service providers, information may be processed in countries other than the country where it was collected. Where required, we use appropriate safeguards to protect transferred data.

The App is intended for business use by merchants. We do not knowingly collect personal information from children under the age of 13 (or the minimum age required by applicable law).

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing of personal data. Merchants may also submit privacy-related requests through Shopify-supported mechanisms or by contacting us directly.

Merchants remain responsible for their own privacy notices, customer consents, and lawful use of any data they send to the App. Merchants should only upload information they are authorized to use for their store operations.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. Continued use of the App after an update means you acknowledge the revised Policy.

If you have questions about this Privacy Policy or our data practices, please contact us: