Visceral Apps, LLC (“we”, “us”) makes Visceral Consignment (“the App”), a Shopify app that helps consignment shops (“merchants”) track their consignors’ sales, work out and record payouts, and give consignors a portal of their own. This policy explains what information the App and visceralapps.com collect, how we use and share it, and how it is deleted.
Our role
For information about a merchant’s own business, such as their account and billing details, we decide how it is used. For information about a merchant’s consignors and customers, the merchant decides what is collected and why, and we process it on the merchant’s behalf to provide the App. If you are a consignor or a customer of a shop that uses the App, please contact that shop first about your information. We will help them respond.
Information we access from Shopify
When a merchant installs the App, Shopify asks them to approve the permissions (“access scopes”) the App needs. You can read more about access scopes in Shopify’s documentation.
Requested by every installation
| Scope | Why we need it |
|---|---|
read_products, write_products | Read your catalog so we can match products to consignors. Write access publishes products your consignors submit once you approve them, applies product edits you approve, and saves barcodes to variants. |
read_inventory, write_inventory | Read stock levels by location. Write access applies inventory changes you approve and sets starting stock on newly published products. |
read_locations | Know which location an item sold from, for location-based payout rules and reports. |
read_orders | Read orders and their line items, prices, discounts, taxes, shipping, refunds and payment transactions, so we can work out what each consignor is owed. |
read_fulfillments, read_merchant_managed_fulfillment_orders | Show fulfillment status and tracking numbers on payout details. |
read_publications, write_publications | Let you choose which sales channels a newly published product appears on. |
read_content | Read the metafield definitions used on the product submission form and in payout rule conditions. |
Requested only when you use a feature
These are requested only when you turn on the feature that needs them, or are granted to your shop on request. Shopify asks you to approve each one first.
| Scope | Why we need it |
|---|---|
read_metaobjects, write_metaobjects, read_metaobject_definitions, write_metaobject_definitions | The Consignor field: we keep your consignors as entries in Shopify so you can pick one on each product page. Also used for per-product payout profiles. |
read_customers | Show the customer’s name on orders. |
read_all_orders | Read orders older than 60 days, when your tracking start date is further back than that. |
read_discounts, write_discounts | Schedule consignor promotions as Shopify automatic discounts. |
Webhooks
Webhooks are notifications Shopify sends the App when something changes in your store, so payouts and reports stay accurate without you re-entering anything. You can read more in Shopify’s documentation. The App subscribes to:
- App and shop:
app/uninstalled, shop/update - Products and inventory:
products/create, products/update, products/delete, inventory_items/create, inventory_items/update, inventory_items/delete, inventory_levels/connect, inventory_levels/disconnect, inventory_levels/update - Locations:
locations/create, locations/update, locations/delete - Orders and payments:
orders/create, orders/updated, orders/delete, orders/paid, orders/cancelled, orders/fulfilled, orders/partially_fulfilled, order_transactions/create - Fulfillment:
fulfillments/create, fulfillments/update, fulfillment_orders/moved - Custom data:
metafield_definitions/update, metafield_definitions/delete, metaobjects/create, metaobjects/update, metaobjects/deleteThe metaobject topics cover Consignor field entries only.
We also receive Shopify’s privacy requests (customers/data_request,
customers/redact and shop/redact) and handle them as described
under Keeping and deleting information.
Information we collect
- Merchant account: your shop’s name, domain, contact email, currency and time zone, and any contact details you give us.
- Store data from Shopify: products, variants, inventory, locations, orders, refunds, transactions and fulfillments, as described above. Orders can include the customer details Shopify sends with them, such as the customer’s name, email, phone number, and billing and shipping addresses. We never receive customers’ card details.
- Consignor information that merchants or consignors enter: name, contact name, email, phone number, mailing address, PayPal email, notes and custom fields. Fields marked as sensitive are encrypted and masked. Also contracts, shared documents, and products consignors submit, with their photos.
- Consignor portal accounts: email address, password (stored only as a secure hash), sign-in activity and document downloads.
- Support conversations: messages you send by live chat, email or the AI help assistant.
- Technical information: server logs (IP address, browser type, pages requested, and dates and times), and cookies that keep you signed in. On visceralapps.com, Google Analytics collects usage data with cookies. For more about cookies and how to turn them off, visit allaboutcookies.org.
How we use information
- To provide the App: tracking consignor sales, calculating payouts, recording payouts, producing statements and reports, running the consignor portal, and sending the emails a merchant sets up.
- To support merchants and consignors, and to troubleshoot problems.
- To keep the App secure and prevent misuse.
- To improve the App.
- To contact merchants about their account, billing, and changes or new features in the App.
We do not sell personal information, and we do not use it for advertising.
Service providers
We share information only with service providers that help us run the App, and only what each one needs: hosting and file storage; email delivery; AI, for the help assistant and AI Generate (only what you type is sent); live chat and support; error monitoring; PayPal, only if you use PayPal Payouts; website analytics and video, on visceralapps.com only. Merchants can ask us for the current list of providers.
We may also disclose information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request, to protect our rights, or as part of a sale or merger of our business, in which case this policy continues to apply to it.
Keeping and deleting information
- While the App is installed, we keep your information for as long as you use the App.
- When you uninstall the App, Shopify asks us 48 hours later to delete your store’s data, and we delete it: products, orders, consignor records, portal accounts and uploaded files. If you reinstall later, you start fresh.
- When a customer of your store asks for their data, or asks to have it deleted, Shopify forwards the request to us and we send you what we hold about them, or delete it.
- Consignors can ask the shop they consign with to remove their records, and the shop can delete them in the App.
- You can ask us to delete your information at any time by emailing support@visceralapps.com.
Security
Information is sent over encrypted connections (HTTPS). Passwords are stored as secure hashes, and sensitive consignor fields are encrypted in our database. Each shop’s data is kept separate, and consignors can only see the records linked to their own portal account.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, and to object to how we use it. To ask, contact us using the details below. If we hold your information on behalf of a shop, we will pass your request to that shop and help them respond.
If you are in the European Economic Area or the United Kingdom, we process your information to provide the App under our agreement with the merchant, and for our legitimate interests in running, securing and improving it. Your information may be transferred to and processed in the United States and other countries where our providers operate.
Changes to this policy
We may update this policy from time to time, for example to reflect changes to the App, our practices, or for other operational, legal or regulatory reasons. When we do, we will change the date at the top of this page.
Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please email us at support@visceralapps.com or call (208) 310-5478.