Last Updated: March 2026
This Privacy Policy explains how KLYX ("we", "us", "our") collects, uses, and protects information when you install and use the Live Metal Bulk Price Updater Shopify application ("the App"). By installing the App, you agree to this policy.
1. Information We Collect
When you install and use the App, we collect the following information:
- Store domain and owner email — to identify and authenticate your Shopify store.
- Product data — titles, variants, prices, and metafields required to calculate and update prices.
- Access tokens — encrypted using AES-256-CBC; never exposed or transmitted in plain text.
- Pricing settings — metal prices per gram, making charge percentages, and formula configurations you enter.
- Usage data — sync history, audit logs, and price records stored for your review.
2. How We Use Your Information
We use collected information solely to provide the App's services:
- Calculate and update product prices based on your configured formulas.
- Provide bulk price update services via Shopify's GraphQL API.
- Store pricing history and sync records for your audit trail.
- Send email notifications for price sync events (if enabled).
- Provide customer support and troubleshoot issues.
We do not sell, rent, or share your data with third parties for marketing purposes.
3. Data Storage & Security
We take security seriously and implement robust measures to protect your data:
- Encryption: Access tokens are encrypted using AES-256-CBC at rest.
- Database: Neon PostgreSQL with SSL/TLS enforced for all connections.
- Transmission: All data is transmitted over HTTPS only — no unencrypted connections.
- Hosting: Application hosted on Vercel (iad1 region, USA East).
4. Data Retention
Your data is retained for as long as the App remains installed on your store.
- Upon uninstall: All shop-level data (settings, formulas, sync history) is deleted within 48 hours.
- Customer data (if any is processed via Shopify webhooks) is deleted within 30 days of an uninstall or deletion request.
5. Third-Party Services
The App relies on the following third-party services to operate. Each has its own privacy policy:
6. GDPR Compliance
For merchants and customers in the European Economic Area (EEA), we respect all rights under GDPR:
- Right to access — request a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure — request deletion of your data.
- Right to portability — receive your data in a structured format.
- Right to object — object to certain types of processing.
We fully support all three mandatory Shopify GDPR webhooks:
customers/data_request
customers/redact
shop/redact
To exercise any of your GDPR rights, contact us at contact@klyx.agency.
If you have questions about this Privacy Policy or our data practices, please reach out: