Legal
Privacy policy — Combined Listings
Last updated: 7 October 2026
This policy describes what the Datima Combined Listings app ("the app"), made by Datima.ai ("we"), stores when a merchant installs it on a Shopify store, and what happens to that data afterwards. Write to support@datima.ai about anything on this page. The website page at https://www.datima.ai/privacy/combined-listings.html says the same.
What the app does
The app links separate products that are one design in several colours into a group, and shows the group's swatch row on every member's product page and on collection and search cards. It scans your catalog to suggest groups; you approve them or build groups by hand.
What we hold, and why
| Data | Where it comes from | Why we hold it | Who sees it |
|---|---|---|---|
| Your store's domain, your store's name, your email, its time zone and currency, and the scopes you granted | Shopify, at install | To run the app for your store and to reach you about it | Us |
| An access token for your store | Shopify, at install | So the app can read your products and theme and store your groups where your theme reads them | Nobody; it is stored encrypted and never shown |
| Your groups: each group's name, its option name (for example Color), its swatch style and look on the product page and on cards, its sold-out rule, its status (active, draft, suggested or dismissed), whether it is published and any publishing error, and the id of the group entry the app keeps in your store | What you set in the app; the catalog scan | To draw each group's swatch row the way you chose | You, and your shoppers on your storefront |
| Suggestions: a suggestion's confidence, the reason given for it and a fingerprint of its products, and for a dismissed suggestion a copy of its members so you can restore it | The catalog scan | To list suggestions and never suggest a dismissed group again | You |
| Each member: the product id, handle, title and image URL, its value (for example Sage) and its swatch colour or swatch image URL, and its position in the row | Your products, read through Shopify's API; what you set in the app | To draw the swatch row and link each swatch to its product | You, and your shoppers on your storefront |
| Your settings: where swatches show (product page, product cards), the card and native-picker preferences, your defaults for new groups, the catalog scan's state and counts, when your theme's app embed and the swatches block were last seen on, and whether card swatches were found on your collection pages (a yes or no and the time, reported at most once a day by a shopper's browser, nothing about the shopper) | What you set in the app; your theme's settings, read only | To draw the swatches the way you chose and to show the setup status | You |
| Background job records and webhook receipts: what ran, when, and the payload Shopify sent (the install alert, the uninstall and compliance webhooks, and the products/update and products/delete webhooks, which carry a product's title, handle, images, variants and status) | The app; Shopify | To keep groups current when a product changes and to prove what was received | Us |
| A plan record: the app is free, and the record says so | The app | To show your plan | You |
| Operational counts: whether the health check ran and how many requests were answered across every store, and hourly counts of each store's active and suggested groups, labelled with your store's domain | The app | To watch the app's health | Us |
What the app writes to your store
To show a group on your storefront without a request to the app, the app keeps one group entry per group in your store (its members, values and swatches) and one app-owned field on each member product pointing at its group. Your settings for the storefront are kept the same way. These belong to the app's own namespace and are removed by Shopify with the app.
Shoppers never reach the app
A product page draws its swatch row from the data stored in your store itself; the shopper's browser never contacts the app. On a collection or search page, card data the page does not already carry is read through Shopify's app proxy on your own domain. Shopify adds a logged-in customer's id to that request; the app verifies it and does not store it. Our request logs, kept for a limited time to operate the app, record each request's address and may therefore contain that id; they are never used to identify anyone. A click on a swatch opens the sibling product, exactly as a link in your theme would; the app receives nothing about the choice, the cart or the order. The app holds nothing about your customers and does not request protected customer data from Shopify: no name, address, email address, phone number or order.
Where it is held
The app runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest; access tokens are encrypted with rotating keys and bound to your store. Every store's rows are separated from every other store's at the database level (row-level security), so no request can read another store's data.
How long
- For the life of the install. When you uninstall (Shopify's app/uninstalled webhook) the app destroys its access token and stops processing your store at once. Your groups and settings are kept so a reinstall restores them.
- About 48 hours after an uninstall Shopify sends shop/redact, and every row of your store is deleted: groups, members, suggestions, settings, job records, webhook receipts and plan; your store's name, email and access token are blanked. The install record keeps your store's domain, the dates, and the time zone, currency and scopes Shopify reported at install.
- When Shopify sends customers/redact or customers/data_request for a customer, the app answers that it holds no customer data, because it never requested any.
Sub-processors
- Amazon Web Services — hosting, the database and the queue that carries your store's jobs.
- Shopify — the source of your products and your theme's settings, and the store that holds the group entries your storefront reads.
Nobody else receives your store's data.
What we do not do
We do not sell, rent or share data with anyone for their own purposes. We run no advertising and no analytics on your store's data. We do not use your data to train models, to profile your customers, or to advise other merchants. We do not read more of your store than the app's declared Shopify scopes allow.
Your rights
You can see and change everything the app holds for your store from inside the app, and delete it by uninstalling. If you are a customer of a store that uses the app, contact the store: the app holds nothing about you.
Website analytics
The website (datima.ai) uses Google Analytics to understand how visitors find and use the site, with cookies set by Google only after you accept the cookie banner. That is the website, not the app: the app sets no cookies and runs no analytics on your store.
Changes
We will post changes to this page and update the date at the top.
Contact
support@datima.ai — Datima.ai.