App: Iromi Color Variant Cards (Shopify app) · Provider: GRAMSHIFT (Tokyo, Japan) · Last updated: 2026-10-12
Iromi Color Variant Cards does not collect, store or share any personal data of your customers. It does not read orders or customers. Your settings are saved in your own Shopify store. Our server keeps only what it needs to connect to your store: your store's address and the access token Shopify gives the app, plus short-lived logs. Shoppers' browsers never contact our server.
| Data | Where it is kept |
|---|---|
| Your settings: the option names to split by, the chosen collections (ID, handle and title), whether search results are included, and the card options | In your Shopify store, as an app-data metafield of the app installation. It is not copied to our server. |
| A public Storefront API token, so the color cards can read product variants in shoppers' browsers | In your Shopify store (an app-data metafield of the installation). This kind of token is designed to be public and gives read-only access to storefront data. |
| Your store's myshopify.com address, the access token (and refresh token) Shopify issued to the app, the granted permissions and their expiry | On our server (a VPS in Japan), in a database readable only by the app's own system user, so the app can call Shopify's API for your store. |
| Web server logs: time, IP address, browser type and the requested address of each request to the app's server (requests from the Shopify admin and from Shopify's systems) | On our server, rotated daily and deleted after 14 rotations (about 15 days), for security and troubleshooting. |
| The app's own log: the time, the store address, the kind of event (for example "app removed") and the address of each request to the app, which includes the parameters Shopify adds (store address, staff language and the signed session token with the staff user ID) | On our server, in the system log, which is rotated automatically by size. |
The app does not request any permission for orders, customers or other customer data, and it does not use the access token for anything other than the features described here.
We do not sell or rent any data and do not share it with third parties, except the service providers named on this page (our server host, our email forwarding provider and Google for email), and when the law requires it.
As an app provider, we see in the Shopify Partner Dashboard which stores installed the app, their plan and billing events, and the store contact details Shopify shares with app providers. We use this only to manage plans, answer support requests and meet legal obligations. Payments are processed by Shopify; we never receive card details.
If you email us, we receive what you choose to send (for example your email address, your message and screenshots) and use it only to answer you. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.
All connections use HTTPS. The app's server checks the signature of every request and webhook from Shopify, runs under its own restricted system user, and keeps its database and secrets readable only by that user.
We process store information to provide the app you installed (contract) and for our legitimate interest in keeping the service secure and answering requests, and to meet legal obligations. GRAMSHIFT is based in Japan, and our server is in Japan.
You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.
If the app starts to collect more data or send data anywhere else, this policy will be updated before that change is released, and the date above will change.
GRAMSHIFT · contact@gramshift.com · 1-10-8 Dogenzaka, Shibuya Dogenzaka Tokyu Bldg 2F-C, Shibuya-ku, Tokyo 150-0043, Japan
アプリ: Iromi Color Variant Cards（Shopify アプリ）・提供: GRAMSHIFT（東京）・最終更新: 2026-10-12。英語版と内容に違いがある場合は英語版が優先します。
本アプリはお客様（買い物客）の個人データを集めず、保存せず、共有しません。注文や顧客の情報は読みません。設定はお使いの Shopify ストアの中（アプリの設置情報のメタフィールド）に保存されます。当方のサーバーに置くのは、ストアにつなぐために必要なもの（ストアのアドレスと Shopify がアプリに発行するアクセストークン）と短期間のログだけです。
ストアから読むもの: 商品のオプション名と値、コレクション（名前・ハンドル・商品数）を read_products 権限で読みます（商品は変更できません）。アプリのプランと、管理画面からのリクエストに Shopify が付ける署名付きトークンも確認に使います。
ストアフロント: 色ごとのカードは Shopify が配信する小さなスクリプトで、お使いのストアの Storefront API から表示中の商品のバリエーション（ID・オプションの値・値段・在庫・写真のリンク）を読み、買い物客のブラウザのセッションストレージに最大10分保管します。Cookie・アクセス解析・広告・追跡は使いません。
削除: アプリが削除されたと Shopify から通知を受けると、当方のサーバーからそのストアのアクセストークンとセッションを削除します。48時間後に Shopify から送られるデータ消去の依頼で、残っているものも削除します。
開示・訂正・削除のご依頼とお問い合わせ: GRAMSHIFT ・ contact@gramshift.com ・ 〒150-0043 東京都渋谷区道玄坂1丁目10番8号 渋谷道玄坂東急ビル2F-C