Privacy
Last updated 10 September 2026
This describes what the MerchUI Gang Sheet Builder holds, why it holds it, and when it is deleted. It covers the app only.
What is stored about a shop
When a merchant installs the app, MerchUI stores:
- the shop's myshopify domain
- an access token and refresh token issued by Shopify, used to talk to the shop's admin
- the settings the merchant enters: roll width, price per inch, minimum and maximum length, gap, colours and store name
- the id of the gang sheet product the app creates in the shop
What is stored about a customer
Nothing. The builder never receives a shopper's name, email address, or any other personal detail, and it does not read them from Shopify. It has no permission to read customer records.
What it does store are the files a shopper uploads while building a sheet: the artwork itself, the preview, and the finished print file. These are filed under the shop, never under a person, and nothing in them identifies who uploaded them. If artwork a shopper uploads happens to contain personal information, that is in the image, and it is treated the same as any other artwork.
Where it is kept
On a server operated by MerchUI in the United States. Access tokens are used only to call the Shopify Admin API for the shop that issued them.
How long it is kept
- Artwork and sheets: removed after the retention period set by the merchant in the app, 30 days by default.
- Access tokens: deleted the moment the app is uninstalled, since they stop working then anyway.
- Everything else: settings, uploads and finished sheets are deleted in full when Shopify sends the shop redaction request, which arrives 48 hours after an uninstall.
A merchant who wants their data removed sooner can uninstall and email support@merchui.com.
Requests from shoppers
Shopify passes on customer data requests and deletion requests from shoppers. MerchUI answers them, and the answer is that no customer data is held. These requests are logged so the record exists.
Who else sees it
Nobody. Nothing is sold, rented, or shared with advertisers or data brokers. There are no third party analytics or tracking scripts in the builder. The only outside parties involved are Shopify, which handles installation and billing, and the server provider that hosts the application.
Payments
Subscription charges are handled by Shopify and billed through the merchant's Shopify account. MerchUI never sees or stores card details.
Changes
If this changes in a way that affects what is stored or who can see it, merchants with the app installed will be emailed before it takes effect.
Contact
MerchUI, Orange County, California. support@merchui.com.
Tell us what is eating your week.
Whether it turns into a tool, a fix to your store, or a note that you already had it right, the first conversation costs nothing.