TopRow privacy policy
App: TopRow: Market Collection Sort ("TopRow", "we", "us")
Provided by: Marvel Labs
Contact: info@marvel-labs.com
Effective date: 4 November 2026
This policy explains what data TopRow reads from your Shopify store, what it keeps, why, for how long, and who else is involved. It applies to the Shopify app TopRow only. It does not cover your own store's privacy policy towards your customers.
1. Who is responsible for the data
- Order data (your customers' orders): you, the merchant, are the controller. TopRow is your processor: we only use this data on your instructions, to provide the app. Our terms and data processing addendum (https://toprow.marvel-labs.com/terms) set out how.
- Your account data with us (your shop's domain, settings and how you use the app, see section 2.1): TopRow is the controller.
2. What data TopRow uses
TopRow is admin-only. It runs inside your Shopify admin and adds nothing to your storefront.
2.1 About your shop and your use of the app (we are controller)
- Your shop's
myshopify.comdomain, shop currency and time zone. - The date you installed or uninstalled TopRow.
- Your settings (for example how many top positions to check) and onboarding progress.
- Whether you clicked "Notify me" for per-market storefront ordering, when, and how many markets your shop had at the time.
- Whether you dismissed the card about our separate AI Shopping Check product.
- Sync status and technical error messages.
- An access token Shopify gives us to call its API on your shop's behalf, and a Storefront API token TopRow creates to check availability and prices per country. Both are stored encrypted.
- Server logs of app activity, which include your shop's domain. Logs never include tokens or customer data.
TopRow uses offline (shop-level) access only. It does not store the name, email or user ID of the staff member using the app.
2.2 About your catalogue (business data)
To build the report and the safe order, TopRow copies from your store:
- Products: title, handle, product type, vendor, status, created date, number of images, whether a description exists, inventory totals, variant and size availability counts.
- Collections: title, handle, sort order, product count, whether a description exists, and the products in each collection with their positions.
- Markets: name, handle, countries, currency and status.
- Per country: whether each checked product is available, its price and currency, and whether it has an image.
- Before TopRow first changes a collection: a snapshot of its original sort and product order, so it can be restored. Also a log of each apply and restore run.
- The health reports and proposed orders TopRow calculates from the above.
2.3 About your customers' orders (we are processor)
TopRow reads orders from the last 90 days (it needs the read_orders and read_all_orders permissions). From each order it requests only:
- the order ID (used during the sync to group line items, then discarded),
- the created and cancelled dates, and whether it is a test order,
- the presentment currency,
- the shipping country code only,
- for each line item: the product ID, quantity and line total (before discounts, in shop currency).
TopRow never requests customer names, email addresses, phone numbers, street addresses or postcodes, and has no access to those fields. It does not request customer IDs.
Shopify's install screen lists "Device and activity data" under customer data for the orders permission. TopRow does not request any device, browser, IP address or visit details from orders.
The orders are processed in memory during the sync. TopRow then stores only totals per product, market and day (units, revenue and number of orders). The raw orders, order IDs and country codes are not stored. Nothing in the stored totals refers to an individual order or customer.
2.4 Shoppers on your storefront
None. TopRow sets no cookies, uses no local storage, pixels or tracking, and runs no scripts on your storefront.
3. Why we use it, and the legal basis
| Purpose | Data | Legal basis (UK GDPR / EU GDPR) |
|---|---|---|
| Show the collection health report per market, the comparison with Shopify's Most relevant, and what AI agents can read per country | 2.2, 2.3 | Processor: on your instructions. Controller data: contract with you (to provide the app) |
| Write the safe base order you approve, and restore your original sort | 2.2 | Contract with you |
| Run the app: sign-in, syncs, error handling, security | 2.1 | Contract with you; legitimate interests (keeping the service secure and working) |
| Record "Notify me" clicks, to decide whether to build per-market storefront ordering and tell you when it is ready in the app | 2.1 | Legitimate interests (planning the product). You choose whether to click |
| Hide the AI Shopping Check card once you dismiss it | 2.1 | Legitimate interests (respecting your choice) |
We do not sell or share your data, use it for advertising, combine it across shops, or use it to make decisions about individual customers. TopRow does not use AI (large language models) in this version, and does not send your data to any AI provider.
4. How long we keep it
- Order totals: a rolling 90-day window. Each nightly sync rebuilds the totals and deletes anything older.
- Raw orders: not kept. They exist only in memory during a sync.
- Catalogue data, snapshots, reports and run logs: while TopRow is installed. Each sync refreshes the catalogue copy.
- Access tokens: deleted as soon as you uninstall.
- Everything else for your shop: deleted when Shopify sends us its
shop/redactrequest, which Shopify sends 48 hours after you uninstall. If that request never arrives, we delete it 30 days after you uninstall. - Server logs: 7 days, set by our hosting provider.
If you reinstall within the 48 hours, your shop's data has not yet been deleted, and TopRow starts a fresh sync.
5. Who else processes the data (sub-processors)
| Sub-processor | What for | Location |
|---|---|---|
| Railway Corporation (USA) | Hosting the app, its database and logs | EU West region, Amsterdam, the Netherlands; see section 6 |
Shopify is not our sub-processor: it is the platform you use, and TopRow reads data from it with your permission.
Not used: TopRow does not use Anthropic (Claude) or any other AI provider in this version. If a future version adds AI features, we will update this list and tell you before your data is sent to one.
6. International transfers
TopRow is run from the United Kingdom. The app and its database run in Railway's EU West region in Amsterdam, the Netherlands. Railway Corporation is a US company and says its primary processing takes place in the United States, so some processing by Railway can happen there. Those transfers rely on the EU-US Data Privacy Framework and its UK extension where the recipient is certified, or otherwise on the EU Standard Contractual Clauses and the UK Addendum, as set out in Railway's data processing addendum.
7. Security
- All traffic to Shopify and to the app uses HTTPS (TLS).
- Shopify and Storefront access tokens are encrypted at rest with AES-256-GCM. The key is held only in the server's environment settings.
- Shopify webhooks are verified with their HMAC signature before they are processed.
- The database, its backups and environment settings are encrypted at rest with AES-256 by the hosting provider.
- Only Marvel Labs staff who run TopRow have access to production systems.
8. Your rights
Merchants: you can ask us for a copy of the data we hold about your shop, or to correct or delete it. Uninstalling TopRow deletes it automatically (section 4). You can also object to our use of data based on legitimate interests.
Your customers: TopRow holds no data about any individual customer, only totals per product, market and day. Requests from your customers should go to you as the merchant. When Shopify forwards a customer data or deletion request to us (customers/data_request, customers/redact), we confirm it and, as we hold no customer-level data, there is nothing to return or delete.
To exercise a right, email info@marvel-labs.com. We reply within one month.
You can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU, the data protection authority where you live or work. We would like the chance to help first.
9. Changes to this policy
If we change what data TopRow uses or who processes it, we will update this page, change the effective date, and tell you in the app before the change takes effect. The current version is always at https://toprow.marvel-labs.com/privacy.
10. Contact
Marvel Labs