Effective September 12, 2026 · Version 1.0

SwatchBro privacy

This supplement describes SwatchBro’s processing for authorized Shopify merchants and incorporates BroFam’s shared privacy notice and Data Processing Agreement.

Information processed

SwatchBro processes the merchant’s Shopify shop and installation identifiers, approved access scopes, billing and entitlement status, product and variant identifiers, option names and values, product media references, swatch mappings, import files and reports, configuration, and security or operational events. SwatchBro does not require customer profiles, orders, payment details, or checkout data for its core swatch features.

How information is used

Information is used to authenticate the merchant, discover product options, preview and apply merchant-confirmed mappings, import or assign Shopify-native media, render and synchronize storefront variants, provide requested support, secure the service, diagnose failures, enforce plan access, and meet Shopify or legal obligations. SwatchBro does not sell personal information or use one merchant’s catalog data to benefit another merchant.

Shopify-native storefront data

Approved mappings and imported assets are stored in Shopify-native products, media, Files, metafields, or metaobjects where practical. Storefront image delivery uses Shopify’s CDN; SwatchBro does not proxy storefront image bytes. Shopify-native merchant content can remain in the merchant’s store after SwatchBro is uninstalled and is not automatically deleted as app-owned service data.

Imports and developer access

Catalog imports support preview and confirmation before writes. Reports and rollback manifests may be retained temporarily for recovery and audit history. Merchant-created Developer API credentials are intended only for trusted server-side integrations and must not be placed in browser or theme code.

Support and providers

Amazon Web Services hosts SwatchBro’s application services in the United States. Shopify supplies authorized catalog, media, installation, and billing information. HelpBro may receive a signed, short-lived support context containing the shop domain and opaque merchant and installation identifiers when an authorized merchant opens support; the support service has its own retention and deletion controls. See BroFam’s subprocessor notice.

Retention and deletion

SwatchBro retains app-owned installation, configuration, import, billing, security, and operational records only as needed to provide and protect the service, support bounded recovery, or meet legal obligations. Uninstall and Shopify privacy webhooks begin the applicable app-owned cleanup workflow. Shopify-native product data and merchant-owned assets are not automatically deleted. A merchant can request access or deletion through the secure contact form; do not include customer personal information, passwords, or access tokens.

Changes

Material changes receive a new version and effective date.

Change history

Version 1.0 — initial SwatchBro privacy supplement prepared September 12, 2026.