Privacy Policy

Last updated: 5 May 2026

This Privacy Policy describes how Uploader by MVIDEV (“Uploader”, “we”, “us”) collects, uses, and shares information when a Shopify merchant installs and uses the Uploader app (the “App”) on their Shopify store.

1. Information we collect

When you install Uploader, we receive information from Shopify about your store and the data needed for the App to function. This may include:

• Store information: shop domain, primary locale, and currency.
• Authentication data: OAuth access tokens and session details required to access the Shopify Admin API on your behalf.
• Product and inventory data: product, variant, inventory, and location data that you choose to import, update, or process through the App.
• Uploaded invoice files: any spreadsheet (XLSX, CSV), PDF, or image (JPG, PNG, WEBP) files you upload through the App for cost extraction. The full file contents are transmitted to our AI processing provider (see Section 3) so that SKU, cost, and quantity values can be read.
• App settings: preferences you configure inside the App (for example fixed costs, currency conversion settings, markup multipliers, and import preferences).
• Processing logs: records of jobs you run through the App, kept so you can review and audit your activity.

We do not request or store customer personal data, order data, or payment information.

Important — sensitive information in uploaded files. Supplier invoices can contain information beyond product SKUs, costs, and quantities, such as bank account numbers, tax IDs, personal addresses, or contact details. Uploader only needs the product line items. If your invoice contains sensitive information that is not required for cost extraction, we strongly recommend redacting those parts (for example by blacking them out in your PDF viewer, or removing the corresponding rows/columns from your spreadsheet) before uploading.

2. How we use information

We use the information described above to:

• Provide, operate, and maintain the App.
• Read and update product, variant, and inventory data on your store, only as directed by you.
• Convert supplier prices using third-party exchange rate data, calculate costs, and apply markup pricing.
• Diagnose issues, improve the App, and provide support.
• Comply with legal obligations.

3. Third-party services

Uploader relies on a small number of third-party services to function:

• Shopify — the platform on which your store runs and from which we read and update store data.
• Anthropic (Claude AI) — used to extract SKU, cost, and quantity data from the invoice files you upload. When you upload a file, its full contents are sent to Anthropic’s API for processing and the structured data is returned to the App. Anthropic processes the file in order to provide the extraction service and does not, under its standard terms, use your data to train its models. We do not retain a copy of the uploaded file after extraction is complete. See Anthropic’s privacy policy at anthropic.com/legal/privacy for more detail.
• Exchange rate providers (such as open.er-api.com) — used to fetch currency conversion rates. Only the source and target currency codes are sent; no merchant or customer data is shared.
• Hosting and database providers — used to host the App and store the data described above.

4. Data sharing

We do not sell your information. We do not share it with third parties except:

• With the service providers described above, to operate the App.
• When required by law, regulation, or valid legal process.
• To protect the rights, property, or safety of MVIDEV, our users, or others.

5. Data retention

We retain your store information, app settings, and processing logs for as long as the App is installed on your store. When you uninstall the App, we delete or anonymise this data within 30 days, except where retention is required by law.

6. Security

We use industry-standard measures to protect the information we store, including encrypted connections (TLS) and access controls. No system can be guaranteed 100% secure, but we work to reduce risk wherever practical.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete information we hold about you, and to object to or restrict certain processing. You can exercise these rights by contacting us using the details below. We will respond within the timeframe required by applicable law.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will also be communicated through the App or by email where appropriate.

9. Contact

If you have any questions about this Privacy Policy or how we handle your information, please contact us at support@mvidev.com.