Privacy Policy — Layoutly

Privacy Policy

Last updated: May 19, 2026

1. Introduction

Layoutly (“Layoutly”, “we”, “us”, or “our”) operates the Layoutly application (the “App”), a Shopify embedded app that lets merchants browse, purchase, and install premium Liquid sections into their Shopify themes.

This Privacy Policy describes how we collect, use, store, share, and delete information when you (a Merchant) install or use the App on your Shopify store. It applies to Merchants only. The App is a business-to-business (B2B) tool; we do not offer services directly to your store’s customers.

By installing or using the App, you agree to this Privacy Policy. If you do not agree, please do not install or use the App.

2. Who Is Responsible for Your Data

For Merchant data processed through the App, Layoutly acts as a data processor (or service provider) on your behalf for shop-level operational data needed to run the App. You remain the data controller for any personal data relating to your business, staff, and customers under applicable privacy laws.

We do not control and are not responsible for how Shopify or you handle personal data outside the App. Your use of Shopify is governed by Shopify’s Terms of Service and Shopify’s Privacy Policy.

3. Information We Collect

We collect only the information reasonably necessary to provide the App:

3.1 Information from Shopify (APIs & OAuth)

  • Shop identifier — Your store domain (e.g., yourstore.myshopify.com).
  • Session & authentication data — OAuth access tokens, session identifiers, API scopes, and session expiry information required to operate the embedded app.
  • Staff account information (optional) — When a staff member opens the App, Shopify may provide limited account details associated with that login (such as name, email address, user ID, locale, and whether the user is the account owner). We store this only as part of the active session record when Shopify supplies it.
  • Theme data — Theme identifiers and theme file operations needed to list themes and install or remove section files (via Shopify’s Theme API), within the scopes you approve at install (read_themes, write_themes).
  • Billing data — One-time charge identifiers, charge status, and related billing metadata from Shopify’s Billing API when you purchase a section. We do not receive or store payment card numbers.

3.2 Information we generate or store

  • Purchase records — Which sections you bought, purchase status, Shopify charge IDs, and purchase timestamps.
  • Installation records — Which sections are installed on which themes (theme IDs, asset keys, installation timestamps).
  • Support communications — Information you voluntarily send us by email (e.g., support@layoutlyapp.com).

3.3 What we do not collect

  • We do not collect, store, or process personal information about your store’s customers (shoppers), such as customer names, emails, addresses, or order history.
  • We do not use advertising trackers, marketing pixels, or analytics cookies to profile visitors to your storefront.
  • We do not request access to protected customer data scopes unless explicitly added and approved in the future; the current App is designed to operate without customer PII.

4. How We Use Information

We use collected information solely to:

  • Authenticate Merchants and provide the embedded App inside Shopify Admin.
  • Display the section marketplace and manage your purchases.
  • Install, track, and remove section files in themes you select.
  • Process one-time charges through Shopify’s Billing API.
  • Maintain security, troubleshoot errors, and improve reliability of the App.
  • Respond to support requests and communicate about the App.
  • Comply with legal obligations and Shopify Partner requirements.

We do not use your data for unrelated marketing, sell your data, or use it to train unrelated machine-learning models.

5. Legal Bases (EEA/UK Merchants)

If you are in the European Economic Area or United Kingdom, we process personal data on these bases:

  • Contract — Processing necessary to provide the App you requested.
  • Legitimate interests — Securing the App, preventing abuse, and improving service quality, balanced against your rights.
  • Legal obligation — Compliance with applicable law and Shopify’s platform requirements.

6. How We Share Information

We do not sell or rent Merchant personal information. We share information only as follows:

  • Shopify — The App runs on Shopify’s platform and uses Shopify APIs; data flows between your store and our App through Shopify as required for functionality.
  • Infrastructure providers — We host the App and database on secure cloud infrastructure (currently Railway and associated PostgreSQL hosting) that process data on our behalf under confidentiality and security obligations.
  • Legal requirements — If required by law, regulation, court order, or to protect rights, safety, and security.

7. International Data Transfers

Your information may be stored and processed in countries other than your own (including the United States or other regions where our hosting providers operate). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms for cross-border transfers.

8. Data Retention & Deletion

  • We retain shop-level data while the App is installed and as needed to provide the service.
  • When you uninstall the App, we delete associated sessions, purchase records, and installation records from our database as part of our uninstall handling.
  • We comply with Shopify’s mandatory GDPR webhooks:
    • customers/data_request — We do not store customer PII; we acknowledge requests.
    • customers/redact — We do not store customer PII; no customer data to delete.
    • shop/redact — We delete remaining shop data within 48 hours of Shopify’s shop erasure request after uninstall, except where law requires longer retention.
  • Section .liquid files already written to your theme may remain in your theme until you remove them; that content is stored in Shopify, not on our servers.

9. Security

We implement reasonable technical and organizational measures, including:

  • TLS encryption for data in transit between your browser, our servers, and Shopify.
  • Encrypted PostgreSQL database hosting with restricted access.
  • Use of Shopify’s official authentication and session libraries.
  • Principle of least-privilege API scopes (read_themes, write_themes only).

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Your Rights & Choices

Depending on your location, you may have the right to:

  • Access personal data we hold about you or your shop.
  • Request correction of inaccurate data.
  • Request deletion (erasure) of your data.
  • Restrict or object to certain processing.
  • Request data portability where applicable.
  • Lodge a complaint with a supervisory authority (EEA/UK).

To exercise these rights, email support@layoutlyapp.com. We will respond within a reasonable time and in accordance with applicable law. You may also uninstall the App to trigger deletion as described above.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To submit a request, contact support@layoutlyapp.com.

12. Cookies & Similar Technologies

The App runs inside Shopify Admin as an embedded application. Authentication is handled through Shopify’s session mechanisms and App Bridge. We do not operate a separate consumer-facing website login for the App and do not set marketing cookies. Our marketing website at layoutlyapp.com may use cookies according to that site’s own settings.

13. Children

The App is intended for Shopify Merchants and is not directed to children under 13 (or 16 where applicable). We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on layoutlyapp.com/pages/privacy-policy and revise the “Last updated” date. Material changes may also be communicated through the App or Shopify App Store listing where appropriate. Continued use after changes constitutes acceptance of the updated policy.

15. Contact Us

For privacy questions or requests:

Terms of Service Privacy Policy

© 2026 Layoutly. All rights reserved.