Privacy Policy
Head to Toe · Last updated 18 August 2026
Head to Toe is a Shopify app that lets shoppers build a complete outfit on a merchant’s storefront and add every piece to the cart at once. This policy explains what the app stores, what it does not, and how long anything is kept.
The short version
The app stores a merchant’s configuration and a cached copy of their own product catalog. It stores no shopper personal data at all — no names, no email addresses, no browsing profiles, and no order contents. A shopper’s outfit selections live in the page URL and in Shopify’s own cart, never in our database.
What we store
| Store identity | Your .myshopify.com domain, your current plan, and your store’s currency format. |
|---|---|
| Access credentials | An access token issued by Shopify when you install the app, used to read your products and to tag your orders. No staff names or email addresses are stored — the app uses store-level access only. |
| Your configuration | The outfit builders you create: labels, colours, positions, and which collection each slot draws from. |
| A catalog cache | Product titles, handles, prices, image URLs and variant identifiers, copied from your own store so the storefront does not have to query Shopify on every page load. This is your commercial data, not personal data, and it is rebuilt automatically from your store. |
What we never store
- Shopper names, email addresses, phone numbers or addresses.
- Payment or card details. The app never touches checkout.
- Order contents, totals or customer records.
- Behavioural profiles or advertising identifiers. The app sets no tracking cookies and runs no third-party analytics on your storefront.
Orders
If order attribution is enabled on your plan, the app subscribes to Shopify’s new-order notification so it can tag orders the outfit builder contributed to — letting you filter and measure them in your own admin.
When one arrives, the app reads the hidden line-item properties the builder added, writes a tag back to the order, and keeps nothing. No part of the order is written to our database, including the customer’s details.
Where the data lives
The app runs on Render and stores data in a managed PostgreSQL database provided by Neon, both hosted in the United States. Data is encrypted in transit using TLS, and encrypted at rest by the database provider. Neither provider uses your data for any purpose other than running the service on our behalf.
How long we keep it
- When you uninstall, your access token is deleted immediately. Your builder configuration is kept, so that reinstalling restores your setup rather than making you rebuild it.
- When Shopify asks us to erase your store — 48 hours after an uninstall, or on request — every record belonging to it is deleted, including builders, slots and the catalog cache.
- Customer data requests and erasure requests are answered with nothing to disclose or erase, because no shopper data is held.
Your rights
You can export or delete your data at any time by uninstalling the app, or by writing to us at the address below. Because the app holds no personal data about your customers, requests from them are answered by your store, not by us.
Changes
If this policy changes, the date at the top of the page changes with it. Material changes affecting what is collected will be announced in the app before they take effect.
Contact
Questions about this policy, or about data the app holds: skyandsandauto@gmail.com.