Privacy Policy

• Store & product data — your shop domain and product details (titles, variants, options, prices), read through Shopify's Admin API to build a customizer for each product.
• 3D model files — GLB models you upload are stored in your own store's Shopify Files (Shopify's CDN), not on Morph's servers.
• Configurator settings — the parts, colors, options, and bindings you configure in the app.
• Authentication — a Shopify access token for your store, so the app can act on your behalf. We do not receive your Shopify password.

Morph does not collect your customers' personal information. When a shopper configures a product and adds it to cart, that happens through Shopify's own cart — Morph only records the chosen options as line-item properties on the order, which stay in your Shopify admin.

Solely to provide the service: rendering the 3D customizer in your storefront, saving your configurations, and syncing selections to the correct product variant. We do not sell data or use it for advertising.

• Shopify — store data, sessions, and your uploaded 3D files (Shopify Files/CDN).
• Vercel — application hosting (United States).
• Neon — encrypted Postgres database for your configurator settings.

When you uninstall Morph, we delete your store's configurator data. We also honor Shopify's mandatory data-request, customer-redact, and shop-redact webhooks. You can request deletion at any time by emailing us.

Data is transmitted over HTTPS and access is scoped to the minimum Shopify permissions the app needs (reading products, writing files). Database access is restricted and credentials are never exposed to the browser.

We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.