Tabula privacy policy

Last updated: 4 November 2026

Tabula ("the app") is made by Tidy Merchant. It builds reports from a Shopify store's data at the merchant's request. This policy explains what data the app uses and why.

What the app reads

When a merchant runs a report, the app reads from Shopify the data that report needs: orders and their lines, products and variants, stock levels and locations, and customers. Customer names, email addresses, phone numbers and addresses are read only for reports that show or filter on them. The app only reads; it never changes the store's data.

What the app stores

• The store's Shopify domain and the access token Shopify issues when the app is installed.
• The reports the merchant saves: their names, settings and schedules.
• The results of each report run, so the merchant can see and download them. Results can include customer data when the report shows it.
• The plan the store is on, and usage events such as install, report run and uninstall.

The app does not store payment details. Shopify handles all billing.

Why

Only to build the reports the merchant asks for, show them, let the merchant download them, and send scheduled reports to the merchant's own Shopify Flow workflows.

Who can see report results

Staff of the store who use the app, and anyone the merchant gives a download link from a scheduled report. The link contains a long random key and stops working after 7 days.

Where it is processed

On servers in Germany (Hetzner Online GmbH). Database backups are kept in Cloudflare R2 (Western Europe). These providers process the data only to host it for us. We do not sell or share the data.

How long

Report results are deleted 7 days after the run. Run records without results are deleted after 30 days. Saved reports are kept until the merchant deletes them or uninstalls the app. When a customer asks a store to erase their data, Shopify tells the app and it deletes the store's stored report results at once. When a merchant uninstalls the app, Shopify asks us 48 hours later to delete the store's data, and the app deletes it. Backups containing it expire within 60 days.

Your requests

To ask what we hold about your store, or to have it deleted sooner, email support@tidymerchant.com.