Craffo Line Sheets & Catalogs
Privacy policyسياسة الخصوصية
Last updated: 15 November 2026
Craffo (“we”, “us”) makes Craffo Line Sheets & Catalogs (the “App”), a Shopify app that lets merchants build wholesale line sheets and PDF catalogs from their Shopify products.
What we access in your Shopify store
When you install the App, you allow it to read:
- Products (
read_products): titles, descriptions, images, prices, SKUs, barcodes, variants, vendors, product types, tags and collections. - Inventory (
read_inventory): stock levels, so sheets can show availability.
The App can’t read or change orders, customers, payments or other store data.
What we store
| Data | Why | Kept until |
|---|---|---|
| Your shop’s domain and the access token Shopify issues to the App | To load your products when you or your buyers open a sheet | You uninstall the App |
| Your line sheets: titles, settings, products or collection, layout, design, contact text and order email | To save and show your sheets | You delete the sheet, or 48 hours after you uninstall |
| Earlier versions of each sheet (up to 50) | So you can restore a previous version | Same as the sheet |
| A hashed password, if you protect a sharing link | To check buyers’ passwords. We never store the password itself. | You remove the password or delete the sheet |
| Counts of buyer views and PDF downloads, and the time of the last view | To show you how your sheets are used | Same as the sheet |
| Your current plan | To apply plan limits | 48 hours after you uninstall |
We don’t copy your product catalog into our database. Product details are fetched from Shopify each time a sheet is shown.
Your buyers
- We don’t ask buyers to sign up and we don’t store their names, emails or orders.
- A CSV order is created in the buyer’s own browser.
- Emailing an order opens the buyer’s own email app. The order does not pass through our servers.
- A password cookie, if used, contains no personal data.
- We count views. We don’t track buyers across sites or use advertising cookies.
Customer data
The App doesn’t access or store your customers’ personal data. We still answer Shopify’s mandatory privacy requests (customers/data_request, customers/redact, shop/redact).
Who processes the data
- Shopify provides product data and hosts product images.
- Our hosting runs on servers in London, United Kingdom.
Web fonts used in sheets are served from our own servers. We don’t sell data, and we don’t share it with advertisers.
Security
Connections use HTTPS. Shopify verifies every request to the App, and sheet links use long random tokens. Passwords are stored only as salted hashes.
Your rights
You can delete any sheet in the App at any time. Uninstalling the App removes your access token at once, and all your sheet data is erased 48 hours later. To ask what we hold, or to have it deleted sooner, email omar@craffo.com.
Contact
Craffo · omar@craffo.com