Developer brand
Aislebright Apps
Catalog
The app requests only read_products. It reads selected product names, variants, SKUs, barcodes and prices. It does not generate or replace barcodes in the Shopify catalog.
Sessions
We store the shop domain, session identifiers, authorization state/scopes, access and refresh tokens and their expiration dates to authenticate the app. When Shopify returns an online session, administrator ID, first and last names, email, language and account flags may also be stored. These administrator fields are not buyer records.
Exports and usage
Temporary PDFs may include the selected product fields. We also store export identifiers, monthly usage and technical lifecycle/deletion records for deduplication.
Customer data
The app requests no customer or order scopes and stores no buyer records. Mandatory privacy webhooks are implemented and authenticated.
PDF retention
PDF access expires 24 hours after preview generation. When the server is healthy, cleanup runs every 15 minutes; generating a new preview also removes expired exports for that shop. PDFs already downloaded to a merchant device are outside the app storage and are not deleted by us.
Usage and technical records
Monthly usage history does not have an automatic expiry. Uninstall removes shop sessions, PDFs and billing attempts while retaining usage to prevent quota resets. The shop/redact webhook removes usage as well. Pseudonymous shop/event hashes and lifecycle markers remain to prevent duplicate processing and stale writes; they currently have no automatic expiry.
Browser preferences
Selection, quantities, label format, fields and SKU fallback preferences are stored in browser sessionStorage. The language preference uses a one-year cookie with localStorage as a fallback. These preferences are used for the interface; no advertising or analytics SDK was identified in this app flow.
Backups
Local snapshots run hourly, with a one-day retention policy and a maximum/minimum of two verified snapshots. Protected rollback/test copies are separate and have no confirmed automatic expiry. SQLite WAL, snapshots and downloaded files may retain older data. Logical deletion and access expiry do not guarantee immediate physical erasure. External replication is not configured; the prepared 168-hour setting does not describe an existing external copy or guarantee erasure.
Technical logs
Technical HTTP logs include request method and URL, potentially including query parameters, status, response size and timing. App and SDK error logs may also exist. Labels container logs rotate at 10 MB with up to three files, which is a size limit rather than a retention period in days. Logs are not claimed to be immediately erased by shop/redact.
Processing providers
Shopify provides APIs, authentication and interface fonts. The app is hosted on an existing shared VPS with its own storage volume and Docker network. Cloudflare provides DNS and support-email forwarding; Google/Gmail receives forwarded support messages, including information the sender supplies. The VPS hosting provider is Contabo, with a provisioned region of New York (US-east), United States. The processing locations of all other providers and the locations of backups have not been verified here. We do not claim exclusive residency in a country, certified transfer safeguards or unverified certifications.
Security
The endpoint uses HTTPS and private operational files with a dedicated app volume. Unverified certifications, encryption at rest and guarantees are not claimed.
Contact
For privacy questions, requests relating to your data or support, email support@aislebright.com. Aislebright Apps is our public developer brand; no response-time guarantee is promised.