Privacy Policy

Last updated: October 2026

MetaSheets ("the App", "we", "us") provides a service to synchronize Shopify product metafield data with a Google Sheet ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store, and how we handle Google user data accessed via Google APIs.

Personal Information the App Collects

When you install the App, we are able to access certain information from your Shopify account, including your shop domain, account email address, and store/product data relevant to the metafields you choose to sync (product titles, IDs, SKUs, and the metafield values themselves).

We collect personal information directly from you, through your Shopify account, or through the following technologies:

• Cookies — data files placed on your device, often including an anonymous unique identifier.
• Log files — track actions on our services and record data such as IP address, browser type, and date/time stamps, used for debugging and abuse prevention.

Google User Data and Google API Services

MetaSheets' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To provide the core functionality of connecting a Shopify store to a Google Sheet, we request the following OAuth scope when you connect your Google account:

• https://www.googleapis.com/auth/drive.file — to create the specific Google Sheet used to sync your metafield data, and to read and write the values of spreadsheets you explicitly create through the App or open via the Google file picker. This scope does not grant access to any other files in your Google Drive — only files the App itself created, or that you explicitly selected through the picker.

We access Google user data only with your explicit consent (via the Google OAuth consent flow), only for the purpose of providing this sync functionality, and we do not use this data for advertising. We do not sell Google user data, and we do not allow humans to read this data except where necessary for security purposes, to comply with applicable law, or with your explicit consent for a support request.

How We Use Personal Information

We use the information we collect to operate and provide the Service, including to:

• synchronize metafield data between Shopify and your chosen Google Sheet;
• communicate with you about your account or the Service;
• maintain and improve the App.

Sharing Your Personal Information

We do not share your personal information with third parties except:

• with service providers strictly necessary to operate the App (e.g., hosting infrastructure), under confidentiality obligations;
• where required to comply with applicable law, a subpoena, search warrant, or other lawful request; or
• to protect our rights, or the rights, property, or safety of our users.

Data Storage & Security

Data is transmitted between the App, Shopify, and Google only over encrypted connections (HTTPS/TLS). Google account tokens and synced metafield data are stored on servers we operate and control, with access restricted to the personnel who need it to run and support the Service. We do not store your Google account password — authentication is handled entirely through Google's own OAuth flow.

Your Rights

If you are a resident of the European Economic Area, you have the right to access the personal information we hold about you, and to ask that it be corrected, updated, or deleted. You may also object to or restrict certain processing, and request data portability. To exercise these rights, contact us using the details below.

We process your information to fulfill our contract with you (providing the Service you installed) and to pursue our legitimate business interests as described above. Your information may be transferred outside the European Economic Area, including to service providers such as Google (Google APIs) and Shopify, both of which maintain their own data protection frameworks (Google: EU Standard Contractual Clauses; Shopify: Data Processing Addendum).

Data Retention

We retain metafield sync data and account information for as long as your Shopify store has the App installed, plus a reasonable period thereafter for legal, backup, and support purposes, after which it is deleted. Uninstalling the App revokes our access to your Shopify store data; you can separately revoke Google account access at any time via your Google Account permissions.

Changes

We may update this privacy policy from time to time to reflect changes to our practices or for legal or operational reasons. We will post the updated policy on this page.

Contact Us

For questions about this privacy policy, or to exercise your rights, contact us at info@metasheets.app or by mail:

Weber & Partner GbR
Odinspfad 2
69126 Heidelberg
Germany
Contact: Thomas Weber