sK Cosmetic INCI & PAO Label – Privacy Policy

Last updated: 19 October 2026

sK Cosmetic INCI & PAO Label shows the ingredient list (INCI), the period after opening and usage notes on your product pages, from the values you enter. This policy explains what the app reads, what it stores, and what it never touches.

What the app reads

With the read_products scope, the app reads your active products' titles, handles and product types so you can choose which products get a label and match the handles in a CSV file. This is read when you open the app and not stored.

What the app stores

• Your store domain (for example your-store.myshopify.com).
• The offline access token Shopify issues at install.
• The label data you enter per product: ingredient list, period after opening, usage, warning, net content and responsible person text. A copy is saved in your store so your theme can show it.

What the app never accesses

• No customer records, orders or payment data. The app requests no customer or order access scope.
• No tracking. The product page block makes no network requests to our servers.

Shopify’s mandatory privacy webhooks

• customers/data_request — the app holds no customer data, so there is nothing to return.
• customers/redact — the app holds no customer data, so there is nothing to delete.
• shop/redact — your store record, labels are deleted.

Where data is stored

Your store domain, access token, labels are held in a Postgres database hosted in the European Union (Frankfurt region). Data is transmitted over TLS.

How long data is kept

Your access token is deleted immediately when you uninstall the app. Your store record, labels are deleted when Shopify sends the shop/redact request, which happens 48 hours after uninstall.

Sub-processors

Provider	Purpose	Location
Shopify	App platform	Global
Neon	Postgres database	EU (Frankfurt)
Vercel	Application hosting	EU

No other party receives any data.

Changes to this policy

If this policy changes in a way that affects what we store, we will update the date at the top of this page.

Contact

Questions about this policy: info@saitkatmerlikaya.com