Privacy Policy — Extended Profile Fields
Last updated: October 19, 2026
Extended Profile Fields (the “App”) is developed and operated by Unlikely (“we”, “us”). The App lets Shopify merchants add custom fields to their customers’ account profile page and collect the answers. This policy explains what information the App processes, why, where it is stored, and how it is deleted, when it is installed on a Shopify store.
For customer data, we act as a processor on behalf of the merchant, who is the controller. Customers who want to exercise their rights should contact the store they shop with first; we assist merchants with those requests.
1. Information we process
Merchant and store information
Store identifiers and access tokens issued by Shopify when you install the App, so it can call the Shopify API on your behalf.
Store contact details: the store’s name and contact email, read from Shopify on install. They are used only to send you service emails about the App (for example a confirmation when the App is uninstalled).
Staff account details that Shopify attaches to an admin session (name, email, locale) when you use the App inside the Shopify admin.
App configuration: your profile field definitions, labels, translations, section titles, consent settings, field order, and interface preferences (such as dismissed notices).
Plan and billing status as reported by Shopify. Payments are handled entirely by Shopify; we never receive payment card details.
Optional Gemini API key: if you choose to use your own Google Gemini key for AI-assisted validation rules, it is stored encrypted (AES-256-GCM). Only its last four characters are kept in readable form so you can recognise it.
Customer information
Profile field answers: the values a customer enters in the fields you configure. They are saved as customer metafields in your Shopify store, not in our database. You decide which fields exist, so you decide what is collected.
Phone number and marketing consent: if you enable them, customers can update their phone number and their email/SMS marketing consent from their profile. The App passes these changes straight to Shopify and does not keep a copy.
Profile activity record: when a customer saves their profile, we store a one-way keyed hash (HMAC) of the customer ID together with the date of that save. It powers the activity counts on the App’s home page. It cannot be read back as a customer ID, contains no name, email or answers, and is deleted after 62 days.
What we do not collect
The App does not read or store customers’ names, postal addresses, orders, or payment information. It does not use cookies or tracking on your storefront, does not build advertising profiles, and does not sell or rent any data.
2. How we use information
To provide the App: display your custom fields in customer accounts, save answers, and show your configuration and activity counts in the admin.
To generate validation rules on request: when you ask the App to write a validation pattern, the plain-language rule you type is sent to Google Gemini. No customer data is sent.
To send service emails about your installation (for example when the App is uninstalled).
To detect, diagnose and fix errors and keep the App secure.
We use the information only for these purposes.
3. Sub-processors
We rely on the following service providers, who process data on our behalf and only as needed to run the App:
Shopify — platform the App runs on; stores customer field answers as metafields.
Vercel — application hosting (Paris region, France).
Supabase — PostgreSQL database hosting (Paris region, France).
Google (Gemini), via the Vercel AI Gateway — generation of validation patterns from the merchant’s text instructions only.
Mailjet — delivery of service emails to merchants.
Sentry — error monitoring.
4. Retention and deletion
When you uninstall the App, your access sessions are deleted immediately.
About 48 hours after uninstall, Shopify sends a shop/redact request and we delete all remaining data we hold for your store: configuration, field definitions, settings, encrypted API key, and activity records.
When a customer asks to be forgotten, Shopify sends a customers/redact request. We delete that customer’s activity record and erase their answers to the App’s fields from Shopify, except for fields you have explicitly set to be kept (a per-field setting in the App, on by default).
When a customer requests their data, there is nothing to export on our side: their answers already live in your Shopify admin, and our activity record holds no identifying information.
Profile activity records are deleted automatically after 62 days.
5. Security
All traffic to and from the App is encrypted in transit with HTTPS/TLS. Requests from Shopify are verified with Shopify’s signatures, and requests from the customer account extension are authenticated with Shopify-issued session tokens. Secrets such as your own Gemini API key are encrypted at rest, and customer IDs are never stored in clear. Access to production systems is restricted to the people who maintain the App.
6. International transfers
Our hosting and database are located in the European Union (France). Some sub-processors, such as Google, Sentry or Shopify, may process data outside the EU; where they do, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Your rights
Depending on where you live (for example under the GDPR or the CCPA), you may have the right to access, correct, delete or port your personal information, and to object to or restrict its processing. Merchants can contact us directly. Customers should contact the merchant, who can edit or delete their answers from the Shopify admin; we will help the merchant respond. You can also lodge a complaint with your local data protection authority.
8. Changes to this policy
We may update this policy when the App changes. The date at the top shows the latest version; significant changes will be announced to merchants through the App or by email.
9. Contact
Questions or requests about this policy or your data: [email protected].