Privacy Policy — MT: Search by SKU, Part Number

Last updated: 1 October 2026. Developer: Merchant Tools. Contact: support@merchanttools.eu.

What the app does

MT: Search by SKU, Part Number adds exact SKU, barcode and part-number matching to a Shopify store's search bar. To do so it keeps a copy of part of the merchant's product catalog in its own database.

Data we store

• Store data: the store domain, an access token (encrypted at rest) and the app settings.
• Product data: product and variant titles, handles, SKUs, barcodes, an optional manufacturer-reference metafield, tags, product type, prices, availability and image URLs. Only data the merchant chooses to index.
• Search queries: the text of storefront searches (lower-cased, at most 120 characters), aggregated per store and per day with two counters: how many times it was searched and how many of those searches found a product. These daily aggregates are kept 90 days. Queries that returned no result are also kept, with a counter and the date last seen, until the merchant clears them. This lets the merchant see what customers look for and improve the catalog.
• What is not stored with a search: who searched, IP address, cookies, device or any visitor identifier. A query that looks like an email address or a phone number is never recorded (the search itself still runs). Visitors type free text, so we cannot guarantee that no query ever contains personal information; merchants can clear the recorded queries at any time.

We do not access customer records (names, emails, addresses, orders): the app only requests the read_products permission and never writes to the store.

Where data is processed

Servers and the database are hosted by OVHcloud in Gravelines (France), within the European Union. Encrypted backups are stored by Scaleway in Paris (France) and kept for at most 35 days.

Emails

We keep the store's contact email to send one setup email after installation, with the steps to activate the app, and to answer your support requests. We send no newsletters and no marketing emails. Reply STOP to that email, or write to support@merchanttools.eu, and we will not email you again except to answer your own support requests. If you reply STOP, we keep only a record of that choice (your store domain and a one-way hash of the email address), even after you uninstall, so that it is still respected if you reinstall.

Retention and deletion

• When the app is uninstalled, all data for that store is deleted immediately, and again on Shopify's shop/redact request 48 hours later; it leaves our encrypted backups within 35 days.
• We honor Shopify's customers/data_request and customers/redact webhooks; as we hold no customer data, these return an empty record.
• Daily search counters are deleted automatically after 90 days. Merchants can clear the search statistics and the no-result search log from the app at any time.

Sharing

We do not sell or share data with third parties. Data is only processed by our hosting providers (OVHcloud, and Scaleway for encrypted backups) under their data-processing terms.

Storefront visitors

The search widget sends the typed query to our server to return matching products, and records the query text (as described above, without any visitor identifier) when the visitor settles on it. The quick order form sends the pasted references to our server to find the matching products; they are not stored. No cookies are set and visitors are not tracked or identified.

Changes

We may update this policy; the date above indicates the latest version. Questions: support@merchanttools.eu.