Privacy Policy

Last updated: April 2, 2026

This Privacy Policy describes how Daria Nevezhyna ("we", "us", or "our"), operating the Konfigur app (available at app.konfigur.co), collects, uses, and discloses information when you install and use the Konfigur app. This policy applies to Shopify merchants who install the App — not to the end customers of those merchants' stores.

1. Data We Collect

When you install and use Konfigur, we collect the following information:

Shop domain — your myshopify.com store URL, used to identify your account
OAuth access token — issued by Shopify during installation, used to make authorized API calls on your behalf
Merchant user details — your name, email address, user ID, and locale, as provided by Shopify during the OAuth flow

2. How We Use This Data

We use the data listed above solely to:

Authenticate API requests to the Shopify Admin API on your behalf
Provide the App's functionality (configuring and rendering Rive animations on your storefront)
Maintain your session while you use the App

We do not use your data for marketing, advertising, or any purpose unrelated to providing the App.

3. Shopify API Permissions

Konfigur requests the following Shopify API scopes during installation:

Permission	Why it's needed
write_products	To save animation configuration as metafields on your products
read_themes	To scan your active theme for existing render target blocks
write_files	To upload Rive animation asset files to your Shopify Files library

4. Data Storage

Sessions — your shop domain, OAuth token, and merchant user details are stored in a PostgreSQL database hosted on our servers, used to maintain your authenticated session.
Animation configuration — all Rive instance settings (animation file references, CSS selectors, input bindings) are stored as Shopify metafields on your shop and products. This data lives within your Shopify store and contains no personal information.

We do not sell, rent, or share your personal information with third parties, except:

Shopify — as the underlying platform; your data passes through Shopify's infrastructure as part of normal app operation. See Shopify's Privacy Policy for details.
Legal obligations — if required by law or to protect our rights.

6. End-Customer Data

Konfigur does not store any personal data of your store's end customers (buyers), and never accesses customer names, email addresses, phone numbers, or shipping/billing addresses.

The only end-customer-related data the App processes is order information (line items and order totals), read on demand from Shopify's API for one purpose: showing you, the merchant, which of your orders contain Konfigur customizations and the revenue associated with them (the in-app Analytics page). This data is computed at the moment you open the page and is not stored by the App.

If we receive a GDPR customers/data_request or customers/redact webhook for your store, we respond confirming that no customer data is held, because none is stored.

We handle the following Shopify GDPR compliance webhooks:

customers/data_request — we confirm no customer data is stored
customers/redact — we confirm no customer data is stored
shop/redact — we delete all session data associated with your shop (see section 8 below)

8. Data Retention and Deletion

We retain your session data for as long as the App is installed on your store.

When you uninstall Konfigur, all session data (shop domain, OAuth token, merchant user details) is automatically deleted from our database within 48 hours of uninstallation, in compliance with Shopify's data protection requirements.

Animation configuration stored in your Shopify metafields is owned by your store and is not deleted by us on uninstall — you can manage or delete it directly via the Shopify admin.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your personal information
Object to or restrict our processing of your personal information

To exercise any of these rights, contact us using the details below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or to exercise your rights:

Email: daria@konfigur.co
Phone: +1 (437) 972-5507
Address: 54 Oriole Gardens, Toronto, Ontario, M4V 1V7, Canada