AttrFill: Privacy Policy
Last updated: 2026-10-08
AttrFill fills in blank Shopify product categories and category attributes (color, material, target gender and similar) for a store. This page lists what data the app handles and why.
Data we process
- Your shop domain and the app access token Shopify gives us, so the app can read and update your products.
- Product data, read from your store: title, description (only the first 600 characters are used), vendor, product type, tags, variant option names and values, the current category and the existing category attribute values.
- What the app produces: suggestions (the suggested value, a confidence score, your accept or reject decision, and a short text snippet showing which words in your product led to the suggestion), a log of the values the app wrote and the values they replaced (so you can restore them), your settings, and usage counters (products processed and input size per day).
- For new and edited products, the product id is kept in a short queue until the product has been processed.
AttrFill does not read or store customer, order or payment data, product images, or your store contact details. Its Shopify permissions are limited to products and the metaobject entries that hold category attribute values.
Who receives product data
- Cloudflare (Workers AI), our sub-processor for classification. For each product we send the text fields listed above (title, the first 600 characters of the description, vendor, product type, tags, variant options) together with the list of categories or attribute values to choose from. We do not send images, customer data or order data. Cloudflare processes this text on our behalf and returns a classification. According to Cloudflare's Workers AI data usage terms, Cloudflare does not use this content to train AI models or to improve its or third-party services without our explicit consent, and does not make it available to other Cloudflare customers. AttrFill does not connect Workers AI to any Cloudflare storage service, so the text is not stored at Cloudflare by us. (Source: https://developers.cloudflare.com/workers-ai/platform/privacy/)
- Shopify, the platform the app runs on, for reading and writing your products and for billing.
- Our hosting provider (Render, United States region), where the app and its database run.
We do not sell data, we do not use advertising or analytics trackers, and we do not share product data with anyone else.
Retention and deletion
- Suggestions and the log of written values are kept for up to 90 days, then deleted automatically. Restoring previous values is offered for 30 days after a write.
- Temporary working copies of product data used while a fill job runs are deleted 7 days after the job finishes.
- When you uninstall the app, the access token is deleted immediately and the app stops reading your products.
- About 48 hours after uninstall Shopify sends a shop redaction request. We then delete everything we hold for your shop: settings, suggestions, logs, jobs, usage counters and sessions. You can also email us to ask for deletion earlier.
- Shopify's customer data requests (data request and redact) are acknowledged; the app stores no customer data, so there is nothing to export or erase.
Changes made to your store
The app only fills blanks: it never overwrites a category or attribute value that is already set. Suggestions wait in a review list unless you turn on automatic writing, which is off by default.