Privacy Policy

Last updated: October 14, 2026 · Applies to the Shopify app “njX Catalog Rollback” by njX

Who we are

njX Catalog Rollback is operated by njX, an independent developer. Contact: [email protected].

What the app does

It keeps a copy of the fields of your products, writes down every change to them, tells the channels you connect about changes that came together, and — only on your explicit order, after a preview — writes earlier values back into the fields you chose. It never creates or deletes a product, a variant, a picture, a collection or a metafield.

What the app reads in your store

• Products (read_products): title, description, handle, vendor, type, theme template, tags, SEO title and description, status, the collections a product is in, the pictures (address, alt text, order), the metafields the app can see, and every variant with its price, compare-at price, SKU, barcode, option values and taxable flag.
• Nothing else. No orders, no customers, no themes, no files. The app holds no customer data of any kind.

What the app writes to your store

• Only on a restore you confirmed (write_products), only into the fields you ticked, only the values shown in the preview: a product’s title, description, handle, vendor, type, template, tags, SEO, status, its manual collections, the order of its pictures, its metafields, and a variant’s price, compare-at price, SKU, barcode and taxable flag. Every value is read again right before it is written; a value that moved since the preview is skipped.
• Nothing is created or deleted. A removed picture, product, variant or metafield is shown with what it was, never recreated.
• Every value the app writes is in its own log, marked as the app’s, and every restore has an Undo.

Data we store

• A copy of your products’ fields — the snapshot every change is compared against — while the app is installed.
• Texts — descriptions, long metafield values and the metafields of a product — are kept in Cloudflare R2, one copy per distinct text, named by its fingerprint (a SHA-256 hash). They are what a restore writes back. No other store can read them.
• Our own records: the change log (which field of which product changed, from what to what, when, and the source as far as it is known), the batches, the restores and their rows, the open and closed issues.
• Settings and channels: what each channel receives; the e-mail addresses, Slack and Discord webhook URLs and Telegram chat ids you add (stored encrypted and shown masked). An e-mail address receives nothing until its owner confirms it, and every message has a one-click unsubscribe.
• Logs: which message went where and when (without its content), and messages you send through the support form.

How your data is used

• Everything the app reads is used for your store only: to notice changes, to build your history and to put values back when you ask.
• It is never sold or shared, never compared with other stores, and never used to train machine-learning or AI models.
• We keep a small amount of anonymous operational telemetry — how long a read took, which rule fired, whether a write succeeded — identified by shop domain and used to keep the app healthy.

How long we keep it

• The snapshot and the texts: while the app is installed. A text is kept as long as a change or a snapshot refers to it.
• The change log: one year, whatever the plan. The plan decides how far back you can look and restore — 7, 90 or 365 days — and a downgrade locks the older history, it does not delete it.
• Restores and their rows: while the app is installed. Closed issues: 90 days. Delivery log: 90 days. Support messages: 12 months.
• Uninstalling deletes everything about your store — the snapshot, the texts, the log — as soon as Shopify tells us: usually within minutes, always within 48 hours.

Where it runs

The app runs on Cloudflare (Workers, D1 for the records, R2 for the texts). E-mail is sent through Cloudflare Email Service; a backup provider (Resend) may deliver a message when the first one is unavailable. Messages to Telegram, Slack and Discord go through their own services under their own terms when you connect them. If you connect a Google Sheet, rows of the log are written to the sheet you chose, through Google’s API, under Google’s terms.

Your rights

You can see, change and delete everything the app holds about your store from inside the app (Data & access), and uninstalling deletes it all. Questions and requests: [email protected].