Privacy policy

Last updated November 2, 2026

CraftRow Labs, run by Aadil Safi in Pakistan ("we"), provides CraftRow: Google Sheets Sync ("CraftRow"), a Shopify app that copies a merchant's order details to a Google Sheet the merchant owns. This policy explains what data CraftRow handles and why.

Information we process

From Shopify: your shop domain, order and line item identifiers, order numbers and dates, product titles, SKUs, quantities, prices, order status, order notes, and line item custom properties. We don't request customer names, email addresses, phone numbers, or postal addresses. Order notes and custom properties are free text, so they can contain personal information if a customer or merchant typed it. Merchants can turn these fields off in the app.

From Google: an authorization that lets CraftRow create a spreadsheet and edit that spreadsheet. See "Google user data" below.

How we use information

We use this information only to provide CraftRow: writing order details to your spreadsheet, showing sync status, enforcing plan limits, and providing support. We don't sell data, use it for advertising, or use it to train AI models.

Google user data

CraftRow requests one Google permission, drive.file, which limits it to files it creates or that you open with it.

• What we access: the spreadsheet CraftRow created for you. We can't see other files in your Google Drive.
• How we use it: we create the spreadsheet, read its Line Item ID column to find the right rows, write and update order rows, clear rows when a privacy request requires it, and check whether the file is in your trash.
• What we store: your encrypted Google access and refresh tokens, and the spreadsheet's ID, title, and link. We don't store the contents of your spreadsheet.
• Who we share it with: nobody, except the hosting provider that runs our servers. We don't sell or transfer Google user data to anyone else.

CraftRow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove CraftRow's access by disconnecting Google in the app, or from your Google account permissions. Disconnecting in the app revokes access and deletes the tokens we hold.

What we store

We store shop details, encrypted credentials, sync settings, plan status, and sync records. Sync records contain order identifiers, order numbers, and status, not order content. Notes, product details, and custom properties pass through our servers while syncing and aren't saved in our database. They remain in your spreadsheet, under your control.

Retention and deletion

• Sync records are kept for the period you set in the app, 30 to 365 days, with a default of 90 days.
• Webhook delivery logs are kept for 30 days, and import records for 90 days.
• Records of privacy requests are kept for one year, to show they were completed.
• When you uninstall CraftRow, we delete your Shopify credentials and revoke and delete your Google connection straight away.
• All remaining shop data is deleted when we receive Shopify's shop deletion request, which Shopify sends about 48 hours after uninstall.

Your spreadsheet stays in your Google Drive after uninstall. It's yours to keep or delete.

Customer privacy requests

We act on the data access and deletion requests Shopify sends us. For a deletion request, we clear that customer's order rows from a connected spreadsheet and delete our records of those orders.

Security

Credentials are encrypted at rest, all connections use HTTPS, each store's data is kept separate, and credentials are scrubbed from logs.

Service providers

Our servers are hosted by DigitalOcean in San Francisco, United States, so data is processed there, and we may access it from Pakistan to run and support the service. You use Shopify and Google under your own agreements with them.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to how it's used. Email us to make a request. If you're a customer of a store that uses CraftRow, please contact that store first, as the store controls your order data.

Changes

If we change this policy, we'll update the date above and post the new version here.

Contact

CraftRow Labs, Aadil Safi, Pakistan
support@craftrowlabs.tech