Help Center

Privacy Policy

Last updated March 17, 2026

Last Updated: March 16, 2026

This Privacy Policy describes how Compass Docs (“Compass Docs,” “we,” “us,” or “our”) collects, uses, stores, and discloses information when Shopify merchants install or use the Compass Docs application (the “App”).

Compass Docs is a Shopify app that helps merchants manage, organize, and display product-related documents, such as manuals, specification sheets, warranty information, compliance files, and similar product documentation.

By installing or using the App, you acknowledge the practices described in this Privacy Policy.

Company: Compass Docs
Contact email: support@compassdocs.app
Privacy contact: privacy@compassdocs.app
Mailing address: SNT Agency
Via Guglielmo Marconi 25/C1
Miradolo Terme, Italy

1. Scope of This Policy

This Privacy Policy applies to information we collect or process in connection with:

  • the installation and use of the App by Shopify merchants
  • the operation of App features within Shopify admin
  • the operation of App-powered storefront features, if enabled by the merchant
  • communications between merchants and Compass Docs regarding the App

This Privacy Policy does not govern Shopify’s own privacy practices. For information about how Shopify handles data, please refer to Shopify’s privacy documentation.

2. Information We Collect

2.1 Information We Receive from Shopify

When a merchant installs or uses the App, Shopify provides certain information to us in connection with authentication, authorization, billing, and App operation. Depending on the features used, this may include:

  • store name
  • store domain and myshopify.com domain
  • Shopify plan information
  • store settings such as currency and timezone
  • store owner or account contact information made available through Shopify
  • authentication and session information needed to securely operate the App

We use this information to provide, secure, support, and bill for the App.

2.2 Product and Catalog Information

With the permissions granted by the merchant, the App may access product-related information needed to provide its functionality, including:

  • product titles
  • handles
  • vendors
  • product types
  • SKUs
  • barcodes
  • product images
  • product metafields and related references used by the App

We use this information to enable document management, product-document association, storefront display, search, and related App functionality.

2.3 Uploaded Product Documents

When a merchant uploads product documents through the App:

  • the files are uploaded through Shopify’s file handling mechanisms
  • the files may be stored through Shopify-managed infrastructure
  • file references may be stored in Shopify product metafields or other Shopify-linked structures used by the App
  • we may process limited metadata about those files, such as filename, file type, file size, category assignment, and related configuration data, to operate the App

We do not use uploaded documents for advertising, profiling, or model training.

2.4 App Configuration and Operational Data

We may store App-related configuration and operational information, such as:

  • subscription or billing status
  • App plan selection
  • widget or display settings
  • category labels and configuration choices
  • feature preferences
  • usage-related counters or summary fields needed to operate the App
  • internal support or troubleshooting records

2.5 Feedback, Support, and Communications

If a merchant contacts us, submits feedback, requests support, requests a feature, or leaves information through an in-App form, we may collect:

  • contact information
  • store name
  • message content
  • ratings or feedback content
  • other information voluntarily submitted to us

We use this information to provide support, improve the App, and respond to merchant requests.

2.6 Information We Do Not Intentionally Collect

Compass Docs is not designed to require customer order data or protected customer data to provide its core functionality. We do not intentionally collect or process merchants’ customer personal information unless such data is incidentally included by the merchant in materials they upload or submit to us.

We do not intentionally collect:

  • payment card data
  • bank account data
  • customer browsing history for advertising purposes
  • customer order history for core App functionality
  • protected customer data unless and until specifically required, approved, and disclosed

If this changes in the future, we will update this Privacy Policy accordingly.

3. How We Use Information

We use the information we collect or receive to:

  • provide and operate the App
  • authenticate merchants and maintain secure sessions
  • link documents to products and display them as configured by the merchant
  • power product-document search and related storefront or admin features
  • provide subscription, billing, and account management
  • respond to support requests and feature requests
  • maintain, troubleshoot, monitor, and improve the App
  • detect, prevent, or investigate fraud, abuse, security incidents, or technical issues
  • comply with legal obligations and enforce our terms and policies

We do not sell merchant data or uploaded product documents.

We do not use merchant data or customer data for advertising targeting.

We do not use merchant data or customer data to train machine learning models.

4. How We Share Information

We share information only as necessary to operate the App, comply with law, or protect rights and security.

4.1 Shopify

Because Compass Docs operates as a Shopify app, information necessarily flows through Shopify in connection with:

  • App installation and authentication
  • billing
  • file uploads and file references
  • product and metafield operations
  • embedded admin functionality
  • storefront integrations enabled by the merchant

4.2 Service Providers

We use service providers that help us host, run, and support the App. These service providers may process information on our behalf and only for the purpose of providing services to us.

Current key service providers may include:

  • Gadget — application hosting, backend infrastructure, and related platform services
    Gadget’s privacy policy is available at: https://gadget.dev/privacy

We may also use infrastructure, communication, logging, support, or security vendors as reasonably necessary to operate the App.

4.3 Legal and Safety Disclosures

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or where we believe disclosure is reasonably necessary to:

  • comply with legal obligations
  • protect our rights or property
  • investigate fraud, abuse, or security issues
  • protect merchants, Shopify, or the public

4.4 Business Transfers

If Compass Docs is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable confidentiality and legal obligations.

5. Data Storage, Security, and Retention

5.1 Storage

Information processed through the App may be stored or processed through:

  • Shopify systems and infrastructure
  • Gadget-hosted infrastructure
  • other service providers engaged to operate and support the App

Uploaded product documents may remain associated with the merchant’s Shopify store and Shopify-managed file systems, depending on how the merchant uses the App and Shopify features.

5.2 Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:

  • encrypted transmission over HTTPS/TLS
  • Shopify authentication and session-based security mechanisms
  • access controls
  • scope minimization
  • logging, monitoring, and troubleshooting controls as appropriate
  • No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5.3 International Transfers

We and our service providers may process information in countries other than the country where the merchant is located, including the United States and other jurisdictions where our providers operate.

Where required, we rely on appropriate transfer mechanisms and safeguards made available by our service providers and applicable law. Shopify notes that international transfers may require appropriate protections such as adequacy decisions, standard contractual clauses, or comparable safeguards.

5.4 Retention

We retain information for as long as reasonably necessary to:

  • provide the App
  • maintain the merchant account relationship
  • comply with legal obligations
  • resolve disputes
  • prevent fraud or abuse
  • enforce our agreements

When a merchant uninstalls the App, we will delete or de-identify App-related data within a commercially reasonable period, unless retention is required for legal, security, dispute-resolution, billing, or abuse-prevention purposes.

Information stored directly in Shopify, including certain files or metafields, may remain in the merchant’s Shopify environment unless removed by the merchant or Shopify.

6. Privacy Rights and Choices

Depending on applicable law, merchants and individuals may have rights regarding personal data, including rights to:

  • access
  • correction
  • deletion
  • restriction
  • portability
  • objection

Shopify specifically expects public apps to be prepared to respond to privacy requests and implement the mandatory compliance webhooks for privacy law compliance.

To submit a privacy request, contact:

We may request information needed to verify the request before responding.

6.1 GDPR / UK GDPR / Similar Regimes

If you are located in the EEA, UK, or another jurisdiction with similar privacy laws, you may have additional rights under applicable law. Where required, we process personal data on one or more of the following bases:

  • performance of a contract
  • compliance with legal obligations
  • legitimate interests
  • consent, where applicable

6.2 California and Similar U.S. State Privacy Laws

If applicable U.S. state privacy laws apply, you may have rights relating to access, deletion, correction, and information about categories of personal data processed. Compass Docs does not sell personal information or share personal information for cross-context behavioral advertising.

7. Cookies and Similar Technologies

The embedded App is designed to operate within Shopify’s environment and may rely on Shopify-supported authentication and session mechanisms.

Compass Docs does not use third-party advertising cookies for tracking or behavioral advertising.

If we use strictly necessary cookies or comparable technologies to operate the App, secure sessions, or maintain core functionality, those technologies are used only as needed to provide the service.

8. Storefront Features

If a merchant enables Compass Docs storefront features, such as a product documents block or search widget, those features may display product-related information and document metadata that the merchant has chosen to make available through the App.

Compass Docs storefront features are intended to expose product-document information, not customer personal information.

Where applicable, storefront requests may be served through Shopify-supported app extension mechanisms, Shopify-managed rendering, app proxy functionality, or related Shopify platform features, depending on the feature configuration.

9. Children’s Privacy

Compass Docs is a business application intended for use by Shopify merchants and store operators. It is not directed to children, and we do not knowingly collect personal information directly from children.

If you believe personal information relating to a child has been provided to us improperly, please contact us and we will take appropriate steps.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App, the law, our service providers, or our data practices.

When we update this Privacy Policy, we will revise the “Last Updated” date above. If required by law, we will provide additional notice of material changes.

Your continued use of the App after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Compass Docs
Support: support@compassdocs.app
Privacy: privacy@compassdocs.app
Mailing address: SNT Agency
Via Guglielmo Marconi 25/C1
Miradolo Terme, Italy

12. Shopify Platform Context

Compass Docs operates as a Shopify app and is also subject to Shopify platform rules and requirements. Shopify requires App Store apps to provide a privacy policy, disclose data handling transparently, and implement the mandatory privacy compliance webhooks.