Privacy policy

UndoTrail History & Revert for Shopify · Last updated 7 October 2026

Abrar, based in Pakistan, provides the UndoTrail History & Revert app (“the app”) to merchants who install it on their Shopify store. This policy explains what the app collects, why, how long it keeps it, and your rights. Abrar is responsible for the data described here. Questions: abrar.niz12@gmail.com.

What the app collects

The app works only with your store’s product catalogue. When you install it, Shopify gives it read and write access to products, to files (for restoring images) and to publishing products on sales channels. It collects:

• Product data, as Shopify sends it when a product is created, edited or deleted, and as the app reads it when installed: the fields listed under “What is recorded” below.
• The changes between versions of each product — the value before and after — which make up your change history.
• Records of reverts you run: what was reverted, the outcome, and the Shopify staff account ID of the person who ran it — see “Staff information” below.
• Store details: your store’s myshopify.com domain, its currency, when the app was installed, and an access token Shopify issues to the app so it can read and update products.
• Your plan in the app. If you choose a paid plan, Shopify handles the payment; the app only receives which plan you are on, never card or bank details.

The app does not collect customer data, order data, or payment information. It does not use cookies for tracking, and it contains no advertising or analytics trackers.

Staff information

Shopify’s install screen lists staff information among the personal data this app can reach. That is accurate, and it is worth being plain about what it means. The app opens inside your Shopify admin, so Shopify tells it which staff account is using it at the time. The app uses that to record who ran a revert, and for nothing else.

What it keeps is the staff account ID — the number Shopify uses for that account. It does not store staff names, email addresses, phone numbers or addresses, and no staff name or email is shown anywhere in the app. The app also cannot tell you which staff member made a change in the Shopify admin: Shopify does not include that in what it sends, so every change recorded from the admin is stored without a person attached to it.

What is recorded

• Product details: Title, description, handle and status; Vendor, product type, category, tags and theme template; Publishing to and hiding from the Online Store; SEO title and description.
• Prices and variants: Price and compare-at price; SKU, barcode, taxable, and selling when out of stock; Variants added, removed and reordered; Options, their values and their order.
• Images and media: Images, videos and 3D models added, removed and reordered; Alt text.
• Metafields: Product metafields added, changed and removed (up to 250 per product).
• Products: Products created and deleted.

Not recorded: inventory quantities and stock tracking; cost per item, weight, shipping, and customs details; collections, and publishing to sales channels other than the online store; market-specific prices and translations; variant metafields; which staff member made a change; orders, customers, discounts, themes and store settings; edits made before the app was installed.

How the data is used

Only to provide the app’s features to you: showing what changed on your products, and writing earlier values back to Shopify when you ask for a revert. The data is not sold, shared for marketing, or used to train machine-learning models.

Where it is stored and who processes it

• Railway hosts the app and its database in the United States.
• Shopify provides your product data to the app and processes plan payments.

If your store is outside the United States, your store’s product data is transferred there to provide the service.

How long it is kept

• Change history is kept for as long as your plan allows — between 90 and 365 days — and then deleted permanently. A store with no active plan keeps the history it already has for 90 days, and nothing new is recorded for it. When a plan ends, or you move to a plan that keeps less, the history the new plan no longer covers is kept for a further 14 days before it is deleted.
• The current copy of each product is kept while the app is installed.
• The notifications Shopify sends about product changes are kept for up to 30 days, and then deleted permanently.
• When you uninstall, everything is kept for 48 hours in case you reinstall. Shopify then sends the app a deletion request, and all data for your store — history, product copies, revert records, notifications and the access token — is deleted permanently.

Your rights

You can ask for a copy of the data the app holds about your store, or for it to be deleted, at any time by contacting abrar.niz12@gmail.com. Uninstalling the app also deletes it, as described above. Because the app holds no customer data, Shopify’s customer data and customer deletion requests are acknowledged and recorded, with nothing to return or erase. Depending on where you are, you may also have the right to complain to your local data protection authority.

Security

Data travels over encrypted connections (HTTPS). Access to the app is through your Shopify admin, verified with Shopify’s session tokens, and each store can only see its own data.

Changes to this policy

When this policy changes, the date at the top changes with it.