Catalog Tagging · last updated 21 September 2026
Catalog Tagging reads a merchant's product catalog, suggests a category and attribute values for each product, and puts the ones it is unsure about in front of a person. This page says what the app stores, who else sees it, and when it is deleted.
The app is operated by Sander Muller. Write to catalog-tagging@scode.nl with any question about this policy or about data the app holds for your store.
Catalog Tagging reads products, not customers, orders or carts. It never requests customer scopes and stores no shopper record of any kind. When Shopify forwards a customer data request or a customer redaction request, the app records that the request arrived and answers that it holds nothing about that person, because there is nothing to return or erase.
| Data | What it is | Why |
|---|---|---|
| Your store | Your store's myshopify.com address, the access token Shopify issues at install, the scopes granted, and your settings: what the app may write back, your subscription, and your price and spending cap. |
To call Shopify on your behalf and to bill for use. |
| Your products | For each product: its Shopify id, title, description as plain text, vendor, product type, tags and option names. | This is what the classification reads. Nothing else about a product is copied. |
| Decisions | The category or attribute value suggested for each product, a confidence score, the runners-up, and whether a person accepted or corrected it. | To build the review queue, to write accepted values back, and to measure how often the app is right. |
| Evidence | The model's raw answer for a decision. Kept for every decision a person reviews, and for a small sample — about one in twenty — of those applied automatically. | So a decision can be explained afterwards, without storing the same thing thousands of times over. |
| Who decided | Inside the Shopify admin this is your store's address, not a person. Outside it, the app asks the reviewer for a name and stores whatever they type. | A correction is only worth keeping if it says who made it. |
| Usage | Counts: products classified, calls made, tokens used, and what was charged. | To bill you and to show you what you spent. |
| Service | What it receives |
|---|---|
| TypeSafe — the classification provider | The product fields listed above, and the list of categories or values to choose between. It does not receive your store's address, your access token, the name of anyone reviewing, or anything about your customers. Its handling of what it receives is governed by its own terms. |
| Sentry — error monitoring | Details of an error when one happens: the URL, the type of error, and where in the code it occurred. The app refuses to send request bodies to Sentry at all, and removes access tokens from any address before it is recorded. |
| Laravel Cloud — hosting | The application and its database run there. |
Nothing is sold, and nothing is shared for advertising. No other party receives your data.
While the app is installed, your catalog and its decisions are kept, so that products already classified are not classified again and charged for again.
When you uninstall the app, the access token is deleted immediately and cannot be used again. Your catalog and decisions stay for another 48 hours. Shopify then sends a shop redaction request, and everything belonging to your store is deleted: products, decisions, runs, evidence, publication records and usage events.
If you reinstall inside those 48 hours, your review work is still there. That is the reason for the delay.
Two records outlive the deletion, and neither contains catalog or shopper data. A record that a privacy request was received and answered, holding your store's address, the type of request and the date — this is the only evidence the obligation was met, and it is needed most once everything else is gone. And the billing record of what was charged, for the same reason a receipt outlives the purchase.
Access tokens are encrypted before they are stored and are never written to logs or error reports. All traffic runs over HTTPS. Every message the app receives from Shopify is checked against Shopify's signature before it is acted on, and the app reads the store's identity from the signed message itself rather than from anything a sender could change.
The app holds no shopper data, so there is none to lose. It has not been through an external security audit, and this page claims no certification.
You control your own catalog. For the products and decisions the app holds for your store, you can ask at any time for a copy or for deletion: write to catalog-tagging@scode.nl, or uninstall the app and the deletion happens on its own within 48 hours.
You remain the controller of your catalog data. The app processes it on your instruction, to provide the service you installed it for. A data processing agreement is available on request.
If this policy changes in a way that affects what is stored or who sees it, the date at the top changes and the change is described here. Continued use after a change means the new version applies.