LabelRun — Privacy policy

What LabelRun stores

Only what the app needs to render a label sheet and to apply the plan limits. All of it is store data, none of it is data about your shoppers.

• Your store’s .myshopify.com domain, its display name, and the access token (and the token that renews it) Shopify issues when you install the app — this is what lets the app read your catalogue on your behalf and, when you ask it to, write the barcodes it generates to your variants.
• Your label templates: the name, the sheet or roll geometry, which fields are printed and where, the printer calibration offsets, and — if you add one — the logo image you upload (PNG or JPEG, 200 KB maximum), stored inside the template.
• Your app settings: default template, default quantity rule, default location, internal EAN-13 prefix, the store’s language and currency format, the plan your store is on and its trial end date (read from Shopify, cached), the template and quantity rule you last printed with, and the dates the app was installed and uninstalled.
• Print counts: how many labels the store printed in the current month, and one row per print run holding the date, whether it came from products or from an inventory transfer, the transfer’s Shopify id if it did, which template and quantity rule were used, and the number of labels.
• Barcode runs: when the app generates barcodes for variants that have none, it records which variant got which code, so that the run can be undone. The Undo button acts on runs from the last 30 days.

What LabelRun never stores

• No customer personal data. LabelRun does not request the customer or order access scopes, so it cannot read your customers’ names, addresses, emails, phone numbers or orders — and it holds no customer records of any kind.
• No payment data. Billing is handled entirely by Shopify; the app never sees a card, and never charges you itself.
• No copy of your catalogue. Product titles, SKUs, barcodes, prices and stock levels are read from Shopify each time you print and are turned into a PDF in your own browser. They are not written to the app’s database.
• No analytics and no advertising trackers. Inside the Shopify admin, the app loads Shopify’s App Bridge and Polaris scripts from Shopify, as every embedded app does. Every page, including the public ones, loads the Inter typeface from Shopify’s servers (cdn.shopify.com), which means your browser sends your IP address to Shopify. There are no other third-party scripts or resources.

Where the PDF is made

Label rendering happens entirely in your browser. The server sends the rows to your admin session and the PDF is built locally, so the label file itself never exists on our infrastructure and is never stored anywhere.

Why it is processed

This data is used to provide the app you installed: printing your labels, applying your plan’s limits and undoing barcode runs (performance of our contract with you, Article 6(1)(b) GDPR, or, where your store is run by a company, our legitimate interest in providing the service it ordered, Article 6(1)(f) GDPR).

Technical logs are kept to keep the service secure and working, and we look at per-store usage figures (plan, number of labels and print runs, templates created) to run and improve the service. Emails you send us are used to answer you. All three rest on our legitimate interest (Article 6(1)(f) GDPR).

The store data is needed for the app to work; without it the app cannot be used. No automated decision-making or profiling takes place.

How long it is kept, and how it is deleted

• Uninstalling the app deletes your store’s access token and session immediately (Shopify’s app/uninstalled webhook).
• 48 hours after the uninstall, Shopify sends a shop/redact request. LabelRun then deletes everything else it holds for the store: templates (including any logo), print counters, print history, barcode runs, and the store row itself.
• Cloudflare also keeps technical logs of the app’s requests (time, address requested, the IP address and browser information sent with each request, the Shopify identifiers in the request, and errors) for at most 7 days, then deletes them automatically. They are used only to diagnose problems and keep the service secure.
• Support emails are kept for as long as needed to answer you and follow up, and deleted at the latest 3 years after our last exchange.
• Nothing else expires on a timer: print history and barcode-run records are kept for as long as the app is installed, and go with the rest at redaction.
• A customers/data_request or customers/redact request is acknowledged and nothing is returned or deleted, because there is no customer data to return or delete.
• Want it gone sooner? Uninstall the app and email the address below; the same deletion is run on request.

Who else processes the data

No one else. LabelRun does not sell, rent or share your data.

• Shopify — the platform the data comes from and the one that hosts your admin, handles billing and delivers the app to you. Shopify acts as an independent controller under its own privacy policy, not on our behalf; for merchants in the EEA and the UK, the Shopify entity is Shopify International Limited (Dublin, Ireland).
• Cloudflare, Inc. (United States) — the app runs on Cloudflare Workers and stores the data listed above in Cloudflare D1; Cloudflare processes it on our behalf, as our processor, under its data processing addendum.
• Google (Gmail) — if you email us, your message and email address are handled in the Gmail mailbox of the address below; Google is certified under the EU–U.S. Data Privacy Framework.

Where data is stored

The database is created with Cloudflare's Western Europe location hint (a hint, not a guarantee). The app’s code runs in the Cloudflare data centre nearest to you, so data passes through it in transit. Shopify data is processed by Shopify under its own policy.

Because Cloudflare, Inc. is a U.S. company, data may be transferred outside the European Economic Area: Cloudflare is certified under the EU–U.S. Data Privacy Framework, and its data processing addendum includes the European Commission’s Standard Contractual Clauses.

Cookies and session

LabelRun sets no cookies of its own in the embedded app; the admin session is authenticated with Shopify's App Bridge session token on each request. The public pages, including this one, set no cookies.

Security

Every request from the Shopify admin carries a session token signed by Shopify, which the app verifies before answering; all traffic is over HTTPS, incoming webhooks are verified by HMAC signature, and each store can only ever read and write its own rows.

Your rights

As the merchant, you can access everything the app holds for your store, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format, by writing to the address below.

Where we rely on our legitimate interest (technical logs, usage figures, support emails), you can object at any time for reasons relating to your situation.

You can also lodge a complaint with a data protection authority: in France the CNIL (www.cnil.fr), or the authority of the country where you live or work.

Your shoppers’ personal data is your responsibility: as the merchant, you are its controller. LabelRun cannot access it and holds none of it, so a shopper’s request concerns your store and Shopify, not LabelRun.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes are announced in the app’s listing.