Sorto is a Shopify app made by TinyFloor (“we”, “us”). It keeps the products in a shop’s collections in the order the merchant chooses. This policy explains what information the app handles, why, and how long we keep it.
Information we handle
| What | Why |
|---|---|
| Shop details: store domain, name, currency, timezone, plan; Shopify access tokens | To run the app for the shop |
| Collections and their products: titles, tags, status, prices, images, stock and whether each variant can be bought | To work out each collection’s order and show the preview |
| Only if the merchant ranks a collection by its own sales and allows access to orders: the products, quantities, refunds and prices of orders from the last 60 days. We keep only units sold and revenue per product; no order numbers, customer names, email addresses or addresses | To order collections by the shop’s own top sellers, and show them on the Top sellers page |
| Only if the merchant ranks a collection by profit and allows access to product costs: each sold variant’s “Cost per item”. We keep only the profit per product | To order collections by profit, and show it on the Top sellers page |
| The merchant’s sorting rules, pins and settings | To keep each collection in the chosen order |
| An activity log of sorts: when, why and how many products moved | So merchants can see what the app did |
| Product usage, recorded by store: which app pages are opened, which features are used (for example sorting turned on, the plan chosen, an upgrade button clicked) and app errors. Keyed by the store’s myshopify address; no names, email addresses or customer data, and no session recordings | To find out which features help merchants, fix problems and improve the app |
Everything comes from the merchant’s Shopify store or is entered by the merchant in the app.
Information we don’t collect
The app never reads or stores customer names, email addresses, phone numbers or addresses, and it keeps no order records. Access to orders is optional, asked for only when a merchant ranks by sales, and can be removed in Settings, which also deletes the sales figures. The app adds nothing to the storefront and uses no advertising trackers. Product analytics are limited to the usage data described above.
Service providers
Each provider only receives what it needs for its job.
- Shopify: the platform the app runs on, and where merchants are billed.
- Oracle Cloud Infrastructure: hosting for the app and its database (United Kingdom).
- Cloudflare: DNS for our domain.
- PostHog: product analytics and error tracking (United States), receiving only the usage data above.
We do not sell personal information or share it for advertising.
How long we keep information
- Rules, settings and product details are kept while the app is installed.
- The activity log keeps the last 60 days.
- When a merchant uninstalls the app, sorting stops straight away. Shopify notifies us 48 hours later and we delete all of that shop’s data from our database.
- Backups are kept for up to 30 days, then deleted.
Security
All traffic uses HTTPS, and access to our servers is restricted to our team.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your information. Uninstalling the app removes a shop’s data. For anything else, email apps@tinyfloor.com.
Changes
If we change this policy, we’ll update the date above and tell merchants in the app about significant changes.
Contact
Questions about privacy: apps@tinyfloor.com.