Privacy Policy
Who we are
Reweigh is a Shopify app that audits product catalogs for shipping data-quality issues — missing weights, implausible weights, duplicated variant weights, and variants assigned to the wrong shipping/delivery profile — and lets merchants apply suggested corrections in bulk, with a full change history and one-click undo.
Operator: PocketBrew Coffee Labs
Contact: pocketbrewcoffee@gmail.com
What data we access
When a merchant installs Reweigh on their Shopify store, the app requests these Admin API scopes:
| Scope | Why |
|---|---|
read_products | Read products and variants — including shipping weights (inventoryItem.measurement.weight), titles, product types, descriptions, and delivery-profile assignments — to detect data-quality issues and build suggested fixes. |
write_products | Write the weight corrections you review and approve. Reweigh never modifies products without your explicit action. |
read_shipping | Read your store's delivery profiles so we can flag variants on the wrong profile for your shipping rates. |
write_shipping | Move a variant between delivery profiles when you approve that specific change. |
read_orders | Count the number of recent orders per product (last 30 days) for the "revenue at risk" metric. |
The read_orders scope grants visibility into protected
customer data under Shopify's policy. We have requested only the
minimum: we read the product ID and quantity
of each order's line items. We do not read, store, or transmit
any customer name, email, phone number, shipping address, billing
address, payment method, or other identifying field.
What data we store
Reweigh stores only technical, non-personal data needed to run the service:
| Stored | Purpose | Retention |
|---|---|---|
Shop domain (e.g. acme.myshopify.com) | Identify which merchant a request is for | Until the app is uninstalled |
| Admin API access token | Authenticate to Shopify on your store's behalf | Deleted automatically when the app is uninstalled |
| Change history (product ID, variant ID, field, old value, new value, timestamp) | Let you review and undo the weight and shipping-profile changes Reweigh applied | While the app is installed; contains no personal data and can be erased on request |
| Dismissed issues (shop, product, issue type) | Keep issues you've marked intentional out of future scans | While the app is installed |
| Guardian auto-scan settings (enabled, frequency, last-run summary) | Run scheduled re-scans if you enable them | While the app is installed |
| Plan status (shop, tier) | Apply the correct free/paid limits via Shopify's billing | While the app is installed |
| First-party usage events (shop, event name, e.g. "scan started") | Understand aggregate feature usage; first-party only | While the app is installed; erase on request |
| Weight-suggestion cache (product title, category, description and the suggested weight) | Avoid re-computing the same suggestion; shared across stores so most merchants never wait on an AI call | Retained for service efficiency; keyed by a hash and not linked to your store identity |
We do not store:
- Order rows, line items, customer records, addresses, or any personal information
- Product images or pricing
- Per-shopper analytics, session recordings, or behavioural data
Scan results are held in memory only for the duration of your active session and are not persisted on our servers.
What data we transmit to third parties
| Third party | What we send | Why |
|---|---|---|
| LLM providers via OpenRouter | Product title + product type/category + (truncated to 400 chars) product description | Estimating typical shipping weight and dimensions for products our category lookup tables don't cover |
| Hosting providers (Vercel for the web app, Railway for the backend) | Standard application traffic needed to operate the service | Infrastructure that runs Reweigh |
We send only the fields listed above to the LLM provider. No order data, no customer data, no store identity, no access tokens. OpenRouter's data retention policy applies; see openrouter.ai/privacy.
Data deletion and Shopify redaction webhooks
Reweigh responds to all three of Shopify's mandatory compliance
webhooks (shop/redact, customers/redact,
customers/data_request):
customers/data_request— We respond confirming that we hold no customer records. Because Reweigh never stores customer or order-line personal data, there is nothing to disclose.customers/redact— We acknowledge. Since no customer data is stored, there's nothing to delete.shop/redactand app uninstall — Your store's Admin API access token is deleted immediately. The technical records listed above (change history, usage events) contain no personal data; if you want them fully erased, email us and we will delete every record associated with your shop domain.
Uninstalling the app also stops all scanning, including Guardian automatic re-scans.
Security
- All data transmits over TLS 1.2+.
- Access tokens are held only in a private, server-side database on the Railway-hosted backend. They are never sent to the browser and never written to logs.
- The Shopify Client Secret used for OAuth + webhook verification is stored only in Railway's secrets store; it never appears in source control or logs.
- Every inbound Shopify webhook is verified with an HMAC-SHA256 signature check before it is processed.
- The Reweigh dashboard authenticates with Shopify-issued session tokens; we never handle merchant passwords.
Cookies and tracking
The Reweigh dashboard does not set cookies, run analytics scripts, or embed third-party trackers. Our public landing and policy pages load web fonts from Google Fonts and set no tracking cookies.
Changes to this policy
If we materially change what we collect or how we use it, we will update the "Last updated" date at the top and notify the contact address on file for each merchant install.
Contact us
Questions, concerns, or data-request inquiries: pocketbrewcoffee@gmail.com