Privacy policy

Last updated September 27, 2026

This policy explains what Bulk Product Editor (“the app”), published by PlatformDTC Labs, stores when a merchant installs it on a PlatformDTC store, and why.

What the app accesses

With the permissions you approve at install (read_products, write_products), the app reads your products and variants and changes the fields you edit: price, compare-at price, status and tags. It does not access orders, customers, payments or any other store data.

What the app stores

• Install record: your store id, store domain and the access token PlatformDTC issued to the app for your store.
• Plan: the id, name and status of your app subscription, as reported by PlatformDTC billing.
• Change log: for each save, the product and variant ids and titles, the fields changed, the values before and after, the result, and the PlatformDTC account id of the staff member who saved. This is what makes “Revert” possible.
• Product cache: a copy of product and variant details, kept for up to 5 minutes to stay within PlatformDTC's API limits.
• CSV exports (Pro): the exported rows, deleted 24 hours after the export is created.

The app stores no customer personal data: no names, emails, addresses or order details.

Retention and deletion

• The change log is kept for 90 days, then deleted.
• When you uninstall the app, PlatformDTC notifies it and it deletes your install record, access token, change log, exports and cache straight away.
• When PlatformDTC sends a shop/redact request, everything stored for that store is deleted.
• For customers/data_request and customers/redact requests, the app holds no customer data, so there is nothing to export or delete.

Where data is processed

The app runs on Cloudflare Workers, and its data is stored in Cloudflare D1. Data travels only between PlatformDTC, Cloudflare and your browser, always over HTTPS. The app does not sell, share or use your data for advertising or analytics.

Contact

Questions or requests about your data: labs@platformdtc.com.