Privacy Policy
Last updated: October 26, 2026 · Applies to the Shopify app “njX Sheets Edit & Undo” by njX
Who we are
The app is operated by njX, an independent developer. Contact: [email protected].
What the app does
It exports products and variants of your store into a Google Sheet that it creates in your Google Drive, reads the sheet back when you press Apply, shows you the changes, and after your confirmation writes them to your store through Shopify's API. Every apply can be undone, and every export keeps a snapshot of the fields it carried. On Stock & media, edit sheets carry stock levels by location, image alt text and order, and the product category; what they write is shown in a preview first and has no Undo. It sends a card to the channels you add when an apply or an undo finishes, and a weekly summary.
What the app reads
- In your store: products and variants with their fields — title, description, SEO title and description, handle, status, vendor, type, tags, template, SKU, barcode, price, compare-at price, tax setting, option values and, on Business, the product metafields you pick (
read_products). For edit sheets, once you allow it on Stock & media: your locations and the stock levels of your variants (read_locations,read_inventory), read for the export and the preview. The store's currency and time zone. Nothing else: not your customers, orders or theme. - In Google: only the sheets the app itself created, and only when you press Apply or Refresh (the
drive.filepermission, below).
What the app writes
- To your store: the fields you apply, and only those, through Shopify's Admin API (
write_products), after you confirmed a preview that showed every change. An undo writes the earlier values back the same way. Edit sheets on Stock & media write stock levels, image alt text and order, and the product category (write_products,write_inventory,write_files), only through an edit sheet whose preview you confirmed; these writes have no Undo. The app does not create or delete products or images, and it does not change orders, customers or the theme. - To Google: the sheet at export (data, headers, hints, a hidden tab with the export id) and, after an apply, a status column and a result line in the sheets the app created. It writes nothing else in your Drive.
Your Google account
Connecting Google asks for the drive.file permission and your basic profile (your e-mail and name, to show which account is connected). drive.file gives the app access to the files it created or that you opened with it, and nothing else: it cannot list, read or change your other files, and we cannot see them. The sheets stay in your Drive and belong to you; you can share, rename, move or delete them with Google's tools.
Google API Services User Data Policy. The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use the Google data only to provide the export, apply and undo features you ask for; we do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or sale with notice to you; we do not use it for advertising, and we do not sell it; no human reads the contents of your sheets except with your explicit permission for support, or where required for security or by law; and the data is not used to develop, improve or train generalized AI or machine-learning models.
Data we store
- The snapshot of exported fields: the values of the fields each export carried, for every exported row, so that the diff, the “changed meanwhile” check and the return to the state before the first edit can work.
- The values of an edit sheet at its export: the stock levels, alt texts, image positions or category it carried, so that the preview can tell what you typed from what moved in the store since. They are deleted with the sheet.
- The apply log: every batch with its sheet, time, counts, and for every value written the earlier and the new value, so that Undo works.
- The sealed Google refresh token: stored encrypted; it lets the app act in your Drive while you are away. It is never shown, and it is deleted when you disconnect Google.
- The ids of the sheets the app created (and their titles and tabs), so it can find them again. Not their content: the content stays in your Drive.
- Channels: the e-mail addresses, Slack and Discord webhook URLs and Telegram chat ids you add, encrypted and shown masked.
- Logs: which message went where and when (without its content), and messages you send through the support form.
How your data is used
- Everything the app reads is used for your store only: to build the sheet, to compare it with your catalog, to write what you confirmed, to undo it and to send what you asked for.
- It is never sold or shared, never compared with other stores, and never used to train machine-learning or AI models.
- We keep a small amount of anonymous operational telemetry — which job ran, whether it succeeded — identified by shop domain and used to keep the app healthy.
How long we keep it
- The snapshots and the apply log: as long as your plan keeps history (7, 90 or 365 days), then they are deleted. Moving to a lower plan deletes nothing at once.
- Disconnecting Google deletes the stored token at once. Your sheets stay in your Drive.
- Delivery log: 90 days. Support messages: 12 months.
- Uninstalling deletes everything we hold about your store, the token included, as soon as Shopify tells us: usually within minutes, always within 48 hours. The sheets in your Drive are yours and are not touched. You can also remove the app's access in your Google account settings at any time.
Sub-processors and where it runs
- Cloudflare — hosting (Workers, D1 database) and e-mail sending through Cloudflare Email Service.
- Resend — e-mail delivery: it may deliver a message when the first provider is unavailable, and delivers the messages of the support form.
- Google — Google Drive and Google Sheets, where your sheets live, under your own Google account and Google's terms.
- Messages to Telegram, Slack and Discord go through their own services, only if you connect them.
Your rights
You can see, change and delete what the app holds about your store from inside the app, disconnect Google at any time, and uninstalling deletes it all. Questions and requests: [email protected].