← Back to Home

Privacy Policy

Last updated: April 23, 2026

Introduction

Aura Customizer ("the App") is built by Outsource In Karachi and is designed to help Shopify merchants create product configurators for their online stores. This Privacy Policy describes how we collect, use, store, and handle your data when you use our App through the Shopify App Store.

Information We Collect

When you install the App, we access and store the following information from your Shopify store:

  • Shop information: Store domain, shop name, and Shopify plan details.
  • Session tokens: Authentication tokens (access tokens, refresh tokens) required to operate the App within your store admin. These may include staff account identifiers (user ID, first name, last name, email) for online sessions.
  • Product data: Product IDs, collection IDs, and variant IDs that you assign to configurators you create.
  • Configurator data: The configurators, steps, options, pages, and rules you create within the App — including titles, descriptions, pricing rules, and display settings.
  • App settings: Your visual customisation preferences such as colors, fonts, and border radius settings.
  • Order data (read only): We read draft order information to support the checkout flow. We do not store order data beyond what Shopify maintains.
  • Uploaded files: Images you upload for use within product configurator options.

We do not collect personal information from your customers beyond what is described above.

How We Use Your Information

We use the information collected solely to:

  • Provide, operate, and maintain the Aura Customizer App and its features.
  • Authenticate your store and staff sessions securely within the Shopify Admin.
  • Save and retrieve your configurator settings, steps, and customisations.
  • Process billing and subscription management through Shopify's Billing API.
  • Respond to support requests and troubleshoot issues.
  • Improve and optimise the App's performance and features.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Storage and Third-Party Processors

Your data is stored in a secure PostgreSQL database hosted on Supabase (Amazon Web Services infrastructure, US East region). Supabase is a trusted third-party data processor operating under industry-standard security practices. By using this App, you acknowledge that your store data is processed and stored on Supabase infrastructure.

All data in transit is encrypted using HTTPS/TLS. Data at rest is encrypted by Supabase's storage encryption.

Sharing Your Personal Information

We do not share your personal information with third parties except in the following limited circumstances:

  • Supabase: As our database provider for storing app data (see above).
  • Shopify: As the platform operator; Shopify's own privacy policy applies to data they hold.
  • Legal requirements: If we are required to disclose information by law, regulation, or valid legal process.

Your Rights

If you are a European resident or resident of another jurisdiction with data protection laws, you have the right to:

  • Access the personal information we hold about you.
  • Request correction or deletion of your personal information.
  • Object to or restrict processing of your personal information.
  • Lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the details in the "Contact Us" section below.

Data Retention

We retain your store's data (configurators, settings, sessions) for as long as you have the App installed. When you uninstall the App, your session data is deleted immediately. All remaining store data (configurators, steps, options, app settings) is permanently deleted within 48 hours of uninstallation, in compliance with Shopify's GDPR requirements via the shop/redact webhook.

Individual customer session data (if your store uses online/staff sessions) is deleted upon receiving a Shopify customers/redact compliance request.

Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We encourage you to review this page periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to make a complaint, please contact us: