Privacy policy

The short version

Umbrella holds configuration about your store — its domains, the brands you define, and the public URLs of your catalogue. It stores no information about your customers. Not names, not email addresses, not orders, not payment details. It never requests access to them.

This is not a marketing claim. It is what the software does: Umbrella does not request Shopify’s customer read scope, so the data is not available to it even in principle. When Shopify sends a customer data request or erasure request on a shopper’s behalf, our answer is that we hold nothing about that person.

Who we are

Umbrella is operated by 14728114 Canada Inc., which trades as Nifty Design Solutions, at Broadacre Dr, Kitchener, Ontario N2R 0S5, Canada. You can also write to niftydesignsolutions@gmail.com. For anything in this policy, including access and erasure requests, use our contact form and choose Privacy, data or legal.

What we collect

Scroll the table sideways to see the full reason.

Catalogue URLs are already public — they are the addresses of pages anyone can visit. We store them so that a single product edit can update one small file rather than rebuild everything.

What we do not collect

• No customer personal data. No names, emails, addresses, orders or carts. The scope that would grant it is not requested.
• No payment data. Shopify handles subscription billing entirely. We never see a card number and we do not operate a payment processor.
• No tracking of your storefront’s visitors. Umbrella runs no analytics and sets no cookies on your storefront. If you configure a per-brand analytics or pixel ID, that is your account with that provider and the data goes to them, not to us.
• No copy of your theme. Where the app keeps theme files at all — see above, and only when an install could not place the canonical cleanly — it is your layout and the files its <head> renders, capped at twelve. Never your assets, templates or sections, never a whole theme, and never redistributed: theme code is yours or your theme vendor’s.
• No stored review content. Judge.me review data — rating, title, text, and the reviewer’s name reduced to first name and last initial — is read at build time to write your reviews file and is not kept in our database afterward. Judge.me also returns each reviewer’s email address and IP address; both are discarded the moment we read them and never stored.
• No selling or sharing for advertising. Ever, by anyone, under any label.

Why we are allowed to

Where the GDPR, UK GDPR or a comparable law applies, our legal bases are:

• Performance of a contract — everything needed to deliver the app you subscribed to: your store identity, domains, brand records, catalogue URLs and job history.
• Legitimate interests — service email to the store owner (including the single welcome and uninstall emails described above), security logging, and diagnosing failures. The interest is keeping a paid service working; the data involved is a business contact and operational records, not personal profiling.
• Legal obligation — responding to Shopify’s mandatory data-request and erasure webhooks, and keeping the minimal records tax and accounting rules require.

We do not rely on consent, because we do not do anything that would need it.

Controller and processor

Two roles, because two different kinds of data are involved.

For your own details as a merchant — store owner name, email, plan, install history — 14728114 Canada Inc., trading as Nifty Design Solutions, is the controller. We decide to hold them and this policy explains why.

For your catalogue and brand configuration, we act as a processor on your instructions: we read it, partition it and publish sitemaps from it because that is what you installed the app to do, and for no other purpose. If you need a data processing agreement for your own compliance, ask and we will provide one.

Who else processes it

Each is engaged under its own data processing terms and receives only what its job requires. We will update this table before adding another, not after.

Where it is processed

Our providers operate internationally, so your data may be processed outside the country you are in, including outside the European Economic Area and the United Kingdom. Where that happens, transfers rely on the mechanisms each provider offers — Standard Contractual Clauses or an equivalent approved safeguard.

If the specific region matters to you, ask. We would rather answer precisely for your case than publish a summary that goes stale the next time a provider changes a default.

This website

This site uses Google Analytics to count visits and see which pages lead people to install Umbrella. It records the pages you view, roughly where you are, your device and browser type, and which site sent you. We do not send it your name, email or anything you type into the contact form.

In the European Economic Area, the United Kingdom and Switzerland it runs in a restricted mode: it sets no cookies and stores nothing on your device, and Google receives only anonymous, cookieless counts of page views.

Everywhere else it sets Google Analytics cookies, and because our Analytics property is linked to our Google Ads account, visits may be used to show Umbrella ads to you on Google later. You can turn off ad personalisation at adssettings.google.com, or stop Google Analytics on every site with Google’s opt-out browser add-on.

This site also uses the Meta pixel, outside Europe only. If your browser reports a European time zone it is not loaded at all. Elsewhere it tells Meta which pages you viewed and whether you clicked through to our App Store listing, so we can measure and show Umbrella ads on Facebook and Instagram. You can control this in your Meta ad settings.

Those two scripts are the only things loaded from a third party. Fonts, styles and images are served from this domain.

Our App Store listing at apps.shopify.com is Shopify’s page, not ours. Shopify reports visits and installs from it to the same Google Analytics property, to Google Ads and to our Meta pixel, under Shopify’s own privacy policy and cookie choices.

The one processor involved in serving it is Cloudflare, which handles request data including IP addresses in order to deliver and protect the site.

The contact form

Submitting it posts your name, email and message to our own application server, which emails them to our support inbox and keeps no copy of its own. Your address is used to reply to you and for nothing else — it is not added to a mailing list, because we do not have one.

Your IP address is used, in memory and briefly, to rate-limit the form so it cannot be used to send bulk mail. It is not written to disk and not retained.

Messages live in the support inbox for as long as the conversation is useful, and are deleted on request. There is no captcha and no bot-detection service, which is why there is also no third party in this paragraph.

Email we send you

We email the store owner address Shopify gives us, from Nifty Design Solutions, through Resend. What we send:

• Service notices while Umbrella is installed — a trial ending, a storefront at risk, sitemaps or feeds about to be removed, a setup that has stopped verifying.
• One welcome email when you first install, explaining what Umbrella does and how to set it up.
• A confirmation when you contact support from inside the app, sent to the reply address you chose, carrying your reference number and a copy of what you wrote. Nothing follows it except our reply.
• One email when you uninstall, saying when your data will be erased and asking, if you are willing, why you left. Replying is optional. If our robots.txt was live on your storefronts, this comes as the email telling you which theme file to remove.

That is all. There is no newsletter, no marketing sequence and nothing after you uninstall. Every email names who sent it and our postal address. Reply “stop” to any of them and we will send only the notices you need about your service. We do not track whether you open our emails or click their links.

How long we keep it

Configuration is kept while the app is installed. Uninstalling preserves it deliberately, so that reinstalling does not mean rebuilding every brand by hand.

Shopify then sends an erasure request about 48 hours after uninstall. On receiving it we delete your published sitemap and Merchant Center feed files first, then your records.

We keep a minimal, non-identifying record that a store once installed and later left: its .myshopify.com domain and the storefront domains it used, its country, currency and time zone, the plan it was on, install and uninstall dates, and counts such as how many storefronts and products it had. Your name, email address, phone number, store name and any notes we made about you are deleted. We keep this record to understand why merchants leave, and so a store that returns is recognised as returning.

If you reinstall Umbrella before the erasure request arrives, we treat the request as overtaken by your return: your records are not deleted, and your setup is where you left it. Uninstalling again starts the same 48 hours.

Support requests sent from inside the app, and the setup snapshot sent with each, are deleted with your records. The emails themselves live in the support inbox for as long as the conversation is useful, and are deleted on request.

Any theme files kept for diagnosis are deleted with your records, and on the next install into a theme that resolves cleanly they are replaced by nothing.

You do not have to wait. Settings › Remove Umbrella data inside the app erases everything immediately, while the app is still installed.

Security

Traffic is encrypted in transit. The database is not exposed to the public internet. API credentials are scoped to the minimum each service needs, and the app requests only the Shopify scopes it uses — which is why it has no route to customer data.

If you believe you have found a vulnerability, use our contact form and choose Reporting a security issue. Please do not post details publicly first. We will confirm receipt and keep you informed until it is resolved.

If a breach affects your data and the law requires notice, we will tell you and the relevant authority within the time the law allows, and we will tell you what we do not yet know rather than wait until we do.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase the data we hold about you, to object to or restrict some processing, and to withdraw consent where consent is the basis — which, here, it is not.

Because we hold store configuration rather than personal profiles, most requests are satisfied by the in-app erase above. For anything else, use the form and we will respond within 30 days. There is no charge, and we will not ask you why.

If you are in the EEA or the UK and you are not satisfied with our answer, you may complain to your local data protection authority. We would rather you told us first, but that right does not depend on it.

Children

Umbrella is a business tool sold to merchants. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

If this policy changes materially, we will update the date above and notify installed merchants by email rather than relying on you to re-read the page. Previous versions are available on request.