Who we are
Composa provides a product configurator app for Shopify merchants. This policy explains what we collect when merchants install Composa and when their customers use a Composa configurator.
Data we collect from merchants
Store name, domain, contact email, plan and the configuration data you create in the app. We receive this from Shopify when you install.
Data we process for shoppers
The choices a shopper makes in a configurator, any files they upload, and anonymous usage events (opens, steps reached). We do not collect payment details — checkout is handled by Shopify.
How long we keep it
Configurations that never become orders expire after 30 days. Uploaded files that are not ordered are deleted after 30 days. All store data is deleted 48 hours after uninstall.
Your rights
We respond to Shopify's customer data request and redaction webhooks within 30 days. Contact privacy@composa.app for anything else.
Sub-processors
Hosting and storage (Railway), error monitoring (Sentry) and email delivery. A current list is available on request.