Privacy policy

Who we are

Shapewiz is a Shopify app that adds size charts and a size finder, the Fit Finder, to product pages. It is made by IT Brain. This policy explains what the app stores, why, and for how long. It covers merchants who install Shapewiz and shoppers who use it in those stores.

Shapewiz holds nothing that identifies a shopper. The Fit Finder needs no name, email or account, and a shopper’s answers stay in their own browser.

What we store about stores

• Store details from Shopify: the store’s myshopify address and main domain, name, contact email, currency, country and time zone.
• Account details: the store’s Shapewiz plan, when the app was installed or uninstalled, and when someone last opened it.
• Shopify access: the keys Shopify gives the app to act for the store, and the permissions they carry. We don’t store the names or emails of the store’s staff.
• Size charts: each chart’s name, sizes and measurements, and which products it is for.
• Product settings: for each product the store sets up, the chart it picked, whether the product runs small or large, its stretch, and the model’s height and size.
• Settings: how the size link looks and what it says, units, the exchange note, and the help contact the store adds (a WhatsApp number, an email address or a contact page).
• A copy of the product list: each product’s title, handle, status, type, vendor, tags, main image link, total stock and sizes, so the Products page can search and filter quickly.
• Usage counts: daily totals of what shoppers did with the size help (see What leaves a shopper’s browser), and how many files the AI Chart Reader read.
• Changes we make for a store: features or limits we give a store from our console, with a reason and an end date.

Published charts, each product’s chart and size settings, and the store’s widget settings are also saved in the store’s own Shopify, as app data. Product pages read them from there, so anyone visiting the store can see them, like the rest of the page.

Shapewiz has no access to the store’s orders or customer list: it doesn’t ask Shopify for it. Plans are billed by Shopify, so we never see card details.

What we store about shoppers

Nothing on our side. Shoppers use the Fit Finder without a name, email or account. What they enter is saved in their own browser, in the storage the browser keeps for that store’s website:

• Their answers: height and, if given, weight, age group, usual size, body shape, measurements, bra size, and trouser or jacket size. They are saved so the next product shows their size straight away. Unfinished answers are kept only until the browser tab closes.
• Their unit choices: centimetres or inches, and kilograms or pounds.
• The month this browser was last counted, so it counts once a month, saved only where analytics are allowed (see the next section).

The answers never leave the browser for Shapewiz: the counts in the next section say what a result was, never the answers behind it. The widget sets no cookies. As with anything a website saves in a browser, the store’s own pages can read them.

Delete, under a result, removes every answer the widget saved in that browser (women’s and men’s), any unfinished answers and both unit choices. Clearing the store website’s data in the browser removes all of it.

What leaves a shopper’s browser

• Counts, after a shopper acts: when they open the size guide or its size chart, start or finish the Fit Finder, or add to cart from a result. Each count holds the kind of action and the product’s number, and some hold one detail more:
  • a result: the suggested size, the match label shown with it (such as “Strong match” or “Largest size available”) and, unless it is a rough guess, which areas (bust or chest, waist, hips, shoulders) were snug, just right or roomy;
  • an add to cart: the size added and the size suggested;
  • with each result, one count without the product’s number: the visitor’s country as Shopify gives it to the page, the widget’s language, and whether lengths were in centimetres or inches;
  • a browser’s first result in a month: one “new this month” count, a Fit Finder session, which plan limits use.
• How counts are sent and kept:
  • Counts go to Shapewiz through the store’s own web address, only after the shopper acts: nothing is sent on a plain page view, and each kind is sent at most once per visit to a product page.
  • We keep only anonymous daily totals per product and detail, such as “14 results in size M” or “9 from the United Arab Emirates, in Arabic, in centimetres”: no times, no ids, nothing that tells one shopper from another. Each day’s totals are kept for 13 months, then deleted.
  • Counts are sent whatever the shopper chose in the store’s cookie banner, because they hold nothing that identifies the shopper and save nothing in the browser.
  • The “new this month” count, and the month saved in the browser for it, happen only where analytics are allowed: in the EU, EEA, UK and Switzerland only after the shopper agrees in the store’s cookie banner; elsewhere as the store’s Shopify privacy settings allow.
• Quick view: when a shopper opens a theme’s quick view or quick add pop-up, the widget asks Shapewiz for that product’s chart, by its product number. Nothing is kept.
• Notes on the cart line: when a shopper adds to cart from a Fit Finder result, two hidden notes go on that cart line: a random code, new each time, and the suggested size. The store sees them on the order. They are added only where analytics are allowed, the same way as the “new this month” count. They stay in the store’s Shopify; Shapewiz can’t read orders.
• The store’s help link: if the store adds a WhatsApp or email help link and the shopper taps it, a message with their size and answers opens in WhatsApp or their email app. The shopper decides whether to send it. It goes to the store, not to Shapewiz.

Shopify adds the store’s address to these requests and, when the shopper is signed in to the store, their Shopify customer number. Shapewiz doesn’t use that number or save it. The widget’s own files are delivered by Shopify.

How we use it

Only to run Shapewiz for the store: showing its charts and the Fit Finder on product pages, keeping each product’s chart right, counting use for plans and the store’s Analytics, and helping the store when it asks. We don’t sell data, we don’t use it for advertising, and we don’t share one store’s data with another.

The people who run Shapewiz see each store’s details, plan and usage in our own console, to run the service and help stores. Every change made there is logged: what changed, before and after, when, and why.

AI Chart Reader

A store can photograph a size chart or upload a PDF, and the AI Chart Reader turns it into a chart for the store to check. This is what happens to the file:

• A photo is made smaller in the store’s browser first: a JPEG, at most 2,000 pixels on its longest side. A PDF goes as it is.
• The file goes to Anthropic’s Claude once, to read the table. Its file name isn’t sent.
• We don’t keep the file. Only the chart the store saves is kept, like any other chart.
• Anthropic doesn’t use what we send to train its models.
• Each read counts toward the plan’s monthly limit. We keep the count, not the file.

Everything in the picture is sent, so photograph the chart on its own.

Shopify privacy requests

Shopify sends apps three privacy requests. This is what Shapewiz does with each:

• Customer data request (a customer asks a store what it holds about them): we hold nothing linked to a customer, so there is nothing to send. Our server logs note the request with the store’s address and the request’s number only.
• Customer erasure (a store or Shopify asks to erase a customer): there is nothing linked to a customer to erase on our side. The notes on cart lines are part of the store’s orders in Shopify, which Shapewiz can’t read or change.
• Store erasure (sent by Shopify 48 hours after a store uninstalls the app): as soon as it arrives, we delete everything we hold for that store. That is its details, access keys, charts, product settings, settings, product list, usage counts, and the features and limits we gave it. Two records keep only the store’s myshopify address (see How long we keep it).

Services we use

We use a small number of service providers to run Shapewiz. Each one only receives what it needs for its job.

How long we keep it

• While the app is installed, we keep a store’s data so its charts, settings and counts work.
• A store can delete its charts, product settings and settings at any time, in Settings, Data, “Delete all app data”. Its store details, plan, product list and usage counts stay while the app is installed.
• Usage counts are daily totals. Each day’s totals are deleted after 13 months.
• When a store uninstalls the app, we delete its Shopify access keys at once. Shopify removes the charts and settings the app saved in the store. We keep our copy for 48 hours, so a quick reinstall loses nothing.
• 48 hours after uninstalling, Shopify asks us to erase the store, and we delete all of it. From the Starter plan, a store can export its charts first, in Settings, Data, “Export all charts”.
• Two records keep the store’s myshopify address after that, without its name, email or other details:
  • our console’s log of changes we made for the store (what changed, before and after, when and why), kept for 12 months;
  • our list of notifications Shopify sent the app about the store (which kind, and when), so none is handled twice, kept for 90 days.
• Shoppers’ answers stay in their browser until they delete them or clear the store website’s data. They don’t expire on their own.
• Our hosting provider keeps server logs for a short time. They can include a store’s address and the number of a privacy request.
• Our database provider keeps a short restore history so mistakes can be undone. Deleted data leaves it when that history runs out, within 30 days.

How we protect it

• Every connection to the app and between our services is encrypted.
• Each store’s data is kept apart by the database itself, so one store can never read another’s.
• Requests from Shopify, and counts from product pages, carry Shopify’s signature. We check it before anything is saved, and drop anything that isn’t signed.
• Only the people who run Shapewiz can open our console. It signs in with passkeys (Face ID or Touch ID), locks itself when left, and logs every sign-in and every change.
• Keys for our services are kept in our hosting settings, never in our code.

This page

This website sets no cookies and uses no analytics or tracking. It loads everything from shapewiz.app itself. On the Try it pages, what you type into the size finder stays in your browser. Cloudflare, which hosts the website, may keep standard request logs, such as the page requested and when, for a short time to keep the site running and secure.

Your rights

Shoppers: your answers are only in your browser, so you control them. Tap Delete under a result, or clear the store website’s data. We hold nothing that identifies you, so there is nothing for us to find, correct or erase. For orders and anything else the store holds, ask the store.

Merchants: write to us about your store’s data at any time.

Who decides: for anything about a store’s shoppers, the store decides to use Shapewiz, and we act on its behalf. For a store’s own account details, we are responsible, and we use them to provide the service the store signed up for.

Where data is processed: the app and its database run in Frankfurt, Germany. Shopify, Anthropic and Cloudflare may process data in other countries, including the United States. We use providers that protect data under standard data protection terms.

California: we don’t sell or share personal information, as those words are used in California law.

Complaints: if you’re unhappy with how we handle your data, write to us first. You can also complain to the data protection authority where you live.

Changes and contact

If we change what we store or who we share it with, we’ll update this page and its date, and tell merchants before the change applies.

Questions: [email protected]