Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Shelvio ("we", "us", or "our") collects, uses, and protects information when you install and use the Shelvio app on your Shopify store.

By installing Shelvio, you agree to the terms of this Privacy Policy.

1. Who we are

Shelvio is operated by Enrique (individual operator), based in Madrid, Spain.

Contact: enrique@shelvio.net

2. What information we collect

2.1 Information provided by Shopify

When you install Shelvio through the Shopify App Store, Shopify shares the following with us:

  • Your shop domain (e.g. yourstore.myshopify.com)
  • Your Shopify store name
  • A Shopify API access token that allows Shelvio to publish products on your behalf

We do not collect your personal name, billing information, or your customers' data.

2.2 Information you provide

When you use Shelvio to import products, you upload CSV or Excel files. These files may contain:

  • Product names, descriptions, prices, and SKUs
  • Inventory quantities
  • Image URLs
  • Any other product data included in your supplier file

2.3 Technical data

We automatically collect minimal technical information to operate the service:

  • Import session logs (timestamps, success/error status)
  • Column mapping configurations you save for reuse
  • Error logs for debugging purposes

3. How we use your information

We use the information we collect for the following purposes:

  • To provide the service: process your CSV/Excel files, map columns to Shopify fields, and publish products to your store via the Shopify Admin API.
  • To improve the product: analyze anonymized error patterns to fix bugs and improve import accuracy.
  • To communicate with you: respond to support requests sent to enrique@shelvio.net.

We do not use your data for advertising. We do not sell your data to third parties.

4. AI processing (Anthropic)

Shelvio uses the Anthropic API (Claude) to automatically detect and map columns in your uploaded files. When you upload a file, the column headers and a sample of up to 20 rows are sent to Anthropic's API for analysis.

This data is used solely to generate column mapping suggestions. We do not store this data after the mapping is returned.

Anthropic's data processing is governed by their own privacy policy, available at: https://www.anthropic.com/privacy

5. Third-party services

Shelvio relies on the following third-party services to operate:

Service Purpose Privacy Policy
Shopify App platform and store integration shopify.com/legal/privacy
Supabase Database (sessions and mapping configurations) supabase.com/privacy
Vercel Application hosting vercel.com/legal/privacy-policy
Anthropic AI-powered column mapping anthropic.com/privacy

6. Data retention

  • Session data: retained for as long as your Shelvio subscription is active.
  • Import logs: retained for 90 days, then automatically deleted.
  • Column mapping configurations: retained until you delete them or uninstall the app.
  • File contents (CSV/Excel): not stored. Files are processed in memory and discarded after import.

When you uninstall Shelvio, we delete your session data and saved configurations within 30 days.

7. Your rights under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of access: request a copy of the data we hold about you.
  • Right to rectification: request correction of inaccurate data.
  • Right to erasure: request deletion of your data.
  • Right to restriction: request that we limit how we use your data.
  • Right to data portability: request your data in a machine-readable format.
  • Right to object: object to our processing of your data.

To exercise any of these rights, contact us at enrique@shelvio.net. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at https://www.aepd.es.

8. Data security

We implement appropriate technical measures to protect your data:

  • All data is transmitted over HTTPS.
  • Access to the database is restricted and authenticated.
  • API tokens are stored encrypted.

No method of transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at enrique@shelvio.net.

9. Children's privacy

Shelvio is a B2B tool intended for Shopify merchants. We do not knowingly collect data from individuals under the age of 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of Shelvio after changes constitutes acceptance of the updated policy.

11. Contact

Email: enrique@shelvio.net
Website: https://shelvio.net