Iromi Color Swatches does not collect, store or share any personal data of your customers. It does not read orders or customers. The swatch groups you create are saved in your own Shopify store. Our server keeps only what it needs to connect to your store: your store's address and the access token Shopify gives the app, plus short-lived logs. Shoppers' browsers never contact our server.
| Data | Where it is kept |
|---|---|
| Swatch groups (group name, option name, the products in order, whether the group is shown) and each grouped product's swatch name and swatch color | In your Shopify store, as app-owned metaobjects and product metafields. They are not copied to our server. |
| A public Storefront API token, so card swatches can read swatch data in shoppers' browsers | In your Shopify store (an app metafield of the installation). This kind of token is designed to be public and gives read-only access to storefront data. |
| Your store's myshopify.com address, the access token (and refresh token) Shopify issued to the app, the granted permissions and their expiry | On our server (a VPS in Japan), in a database readable only by the app's own system user, so the app can call Shopify's API for your store. |
| Web server logs: time, IP address, browser type and the requested address of each request to the app's server (requests from the Shopify admin and from Shopify's systems) | On our server, rotated daily and deleted after 14 rotations (about 15 days), for security and troubleshooting. |
| The app's own log: the time, the store address, the kind of event (for example "app removed") and the address of each request to the app, which includes the parameters Shopify adds (store address, staff language and the signed session token with the staff user ID) | On our server, in the system log, which is rotated automatically by size. |
The app does not request any permission for orders, customers or other customer data, and it does not use the access token for anything other than the features described here.
We do not sell or rent any data and do not share it with third parties, except the service providers named on this page (our server host, our email forwarding provider and Google for email), and when the law requires it.
As an app provider, we see in the Shopify Partner Dashboard which stores installed the app, their plan and billing events, and the store contact details Shopify shares with app providers. We use this only to manage plans, answer support requests and meet legal obligations. Payments are processed by Shopify; we never receive card details.
If you email us, we receive what you choose to send (for example your email address, your message and screenshots) and use it only to answer you. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.
All connections use HTTPS. The app's server checks the signature of every request and webhook from Shopify, runs under its own restricted system user, and keeps its database and secrets readable only by that user.
We process store information to provide the app you installed (contract) and for our legitimate interest in keeping the service secure and answering requests, and to meet legal obligations. GRAMSHIFT is based in Japan, and our server is in Japan.
You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.
If the app starts to collect more data or send data anywhere else, this policy will be updated before that change is released, and the date above will change.
GRAMSHIFT · contact@gramshift.com · 1-10-8 Dogenzaka, Shibuya Dogenzaka Tokyu Bldg 2F-C, Shibuya-ku, Tokyo 150-0043, Japan
アプリ: Iromi Color Swatches（Shopify アプリ）・提供: GRAMSHIFT（東京）・最終更新: 2026-10-12。英語版と内容に違いがある場合は英語版が優先します。
本アプリはお客様（買い物客）の個人データを集めず、保存せず、共有しません。注文や顧客の情報は読みません。作成した色見本のグループはお使いの Shopify ストアの中に保存されます。当方のサーバーに置くのは、ストアにつなぐために必要なもの（ストアのアドレスと Shopify がアプリに発行するアクセストークン）だけです。買い物客のブラウザは当方のサーバーと通信しません。
商品ページの色見本は Shopify がテーマの一部として描画し、スクリプトは読み込みません。商品カードの色見本は Shopify が配信する小さなスクリプトで、お使いのストアの Storefront API から色見本のデータを読み、買い物客のブラウザのセッションストレージに最大10分保管します（商品ハンドル・色見本の名前・色・写真のリンクのみ）。Cookie・アクセス解析・広告・追跡は使いません。
アプリが削除されたと Shopify から通知を受けると、当方のサーバーからそのストアのアクセストークンとセッションを削除します。削除の48時間後に Shopify から送られるデータ消去の依頼で、残っているものも削除します。ストア内の色見本のデータは、アプリでグループを削除すると商品から外れます。アプリ削除後にストアに残るデータは Shopify が扱い、ストアには表示されません。
開示・訂正・削除のご依頼とお問い合わせ: GRAMSHIFT ・ contact@gramshift.com ・ 〒150-0043 東京都渋谷区道玄坂1丁目10番8号 渋谷道玄坂東急ビル2F-C