Privacy policy

Effective: 20 September 2026

MetaSpecs is operated by Mad Over Technology, a proprietorship in India. This policy explains how we handle information when merchants use our product specification table app and contact us.

Information the app handles

When you install and use the app, we receive your Shopify shop domain, authorization scopes and access credentials required to connect to Shopify. Depending on the session Shopify supplies, session records can include a merchant or staff user ID, name, email, locale and account-role information.

We read product and collection information and supported product and variant metafields to show previews and build specification tables. We store your table names, row mappings, translated-label source mappings, selected product or collection identifiers and titles, display-rule conditions and priorities, draft and published configurations, versions and timestamps. Selected referenced-record fields may be read for previews when the required Shopify permission is granted; these bounded preview responses are not stored as a product-data cache. Published table configurations are also stored in your Shopify product or collection metafields. Published rule snapshots are stored in an app-installation metafield on Shopify. Plan visibility and your selected Free-plan table/product identifiers are stored in a private app-installation metafield on Shopify.

We store a per-shop timestamp when we attempt to open Shopify’s native review dialog, so we do not repeatedly ask for a review. Shopify handles the review itself; we do not store its text or rating. We receive the information you choose to include in support emails. Please do not send passwords, access tokens or unnecessary personal information. Our hosting and network providers may process technical information such as IP addresses, browser information, request timestamps and error records to deliver and protect the service.

To understand usage and reliability, we keep daily per-shop counts of app loads, screen views, browser failures, saves, publishing, previews, coverage checks and billing operations, their outcomes and total processing time. These counters contain no product values, customer data, request URLs or individual staff identifiers. Counters use a rolling 30-day reporting window. Older daily buckets are removed during daily housekeeping while the service is running. Counters are also removed with the stored sessions on uninstall or shop redaction. Operational alerts contain fixed failure categories and counts only.

Customer information and cookies

The current app does not request Shopify customer or order data. Its storefront table renders product information through a theme app block; we do not add an advertising pixel or shopper-behavior tracker through that block. Shopify and your store’s other apps may separately use cookies or tracking under their own policies. The embedded admin and our hosting infrastructure use essential session and security mechanisms. Optional setup-guide visibility and your confirmation that a table appears on a product page are stored locally in your browser, scoped to your shop. Product fields should not contain sensitive personal information.

Optional website analytics

On our public MetaSpecs marketing website, Google Analytics loads only after you choose Allow analytics. Google then receives page visits, selected link actions, browser and device information, and network information including your IP address to process the request. We send only fixed page paths and action names, without query strings, fragments, form entries, shop identifiers or authenticated app URLs. Advertising storage, advertising personalization and Google signals are disabled. This tag is not installed in the embedded Shopify app or merchant storefront block.

Your choice is stored in this browser for up to 180 days. If you allow analytics, its first-party cookies expire after up to 90 days. You can change your choice with Cookie settings at the bottom of any marketing page; declining stops further analytics and removes this website’s analytics cookies. Google processes analytics information under its own privacy policy. Declining does not affect app access.

How we use information

We check your Shopify app subscription and plan through Shopify to manage access and billing status. Shopify processes app subscription charges; we do not collect payment card details. We use information to authenticate merchants, display and publish their tables, preserve drafts, prevent conflicting changes, provide support, maintain security and meet applicable legal obligations. We do not sell personal information or use product data to train an AI model.

Service providers and location

We use Shopify for store access and storefront delivery, and Laravel Cloud and its infrastructure providers for hosting, database storage and backups. The application and database are currently hosted in the United States, in the US East (Ohio) region. Network delivery may involve Cloudflare. Support correspondence is handled through our business email service. Providers process information needed to deliver their services. We operate from India, and information may be processed outside your country, including through hosting and platform infrastructure. Contact us for details relevant to your store or data-transfer questions.

Retention and removal

We keep app configuration while it is needed to provide the service. Our uninstall handler removes stored Shopify sessions when we receive an authenticated uninstall event. Our shop-redaction handler removes that shop’s stored templates, sessions, display rules, publication-recovery records, and review-request timestamp when Shopify sends its deletion event. You may also request deletion by email. Uninstalling does not itself guarantee immediate removal of every configuration or backup.

The database is configured with a seven-day backup recovery window; deleted records may remain in recovery backups until that window expires. Published configuration metafields in your Shopify store are separate from our database and may remain after uninstall; contact us for removal guidance. Support records are retained as needed to resolve requests and meet legal obligations; contact us to request deletion. Technical records follow provider retention settings.

Your choices and requests

You can edit your table configurations in the app and revoke app access by uninstalling it in Shopify. Depending on applicable law, you may have rights to access, correct, delete or restrict use of personal information, object to processing, or complain to a relevant authority. Send requests to our contact below. We may need to verify your relationship to the store before disclosing or deleting information. Merchants should direct requests about their shoppers’ store data to Shopify and the services that actually process that data.

Security

We use HTTPS for hosted connections, access-controlled infrastructure and shop-scoped application records. Access tokens are sensitive and are used to perform authorized Shopify operations. No internet service can guarantee absolute security.

Contact

Mad Over Technology (proprietorship)
hello@madovertech.io

Changes

We will update this page and its effective date when our data practices change. Material changes may also be communicated through the app or our support channel.