Privacy Policy

Last updated: July 14, 2026

1. Overview

This Privacy Policy explains how Hallwil Filters (“we”, “the App”) collects, uses, and stores information when you install and use the App on your Shopify store.

We process data as a service provider to merchants. For customer personal data accessed through Shopify, merchants remain responsible under their own privacy obligations.

2. Information we collect

Through Shopify APIs and the embedded app we may access and store:

  • Shop domain, staff session data required for authentication, and locale preferences.
  • Product catalog data (titles, handles, variants, options, tags, metafields, inventory, prices) for indexing and filters.
  • Filter set configuration, app settings, onboarding state, and billing plan snapshot.
  • Anonymous storefront usage events sent to the App Proxy endpoint /v1/events (for example filter applied, search submitted, search suggestions). These events may include a session identifier, page context, and filter or search parameters. They do not include customer names, email addresses, or payment details.
  • Operational logs (errors, indexing progress, API usage) for reliability and security.

3. How we use information

We use collected information solely to provide, maintain, and improve the App: indexing products, serving storefront filters and search, billing integration, and support.

We do not sell merchant or customer data to third parties.

4. Storage and processors

Data is stored in PostgreSQL, search indexes in Typesense, and job queues in Redis on self-hosted infrastructure (Hetzner VPS).

Processors are bound by contractual obligations consistent with this policy.

5. Retention

We retain shop configuration and index data while the App is installed. After uninstall, we delete or anonymize data within a reasonable period unless retention is required by law.

You may request deletion by uninstalling the App and contacting support if additional cleanup is needed.

6. Security

We use industry-standard measures: encrypted connections (TLS), access controls, signed App Proxy requests, and rate limiting on public APIs.

No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your rights

Depending on your jurisdiction you may have rights to access, correct, or delete personal data. Merchants should handle customer requests under applicable privacy laws.

For requests related to data we process on behalf of your store, contact us through support channels listed in the app.

8. Children

The App is not directed at children and is intended for merchants operating commercial Shopify stores.

9. Policy updates

We may update this Privacy Policy. The “Last updated” date at the top reflects the latest revision. Continued use after updates constitutes acceptance.