Last updated: November 12, 2026
This policy describes how Oops LLC ("we") handles data in the Shopify app "Hellostore Accounts" (the "App").
| Company | Oops LLC (ウープス有限会社) |
|---|---|
| Representative | Isao Takahashi |
| Address | MAT Tokiwamatsu 203, Higashi 1-13-4, Shibuya, Tokyo 150-0011, Japan |
| Contact | support@misell-theme.com |
| Website | https://oops.jpn.com |
The App stores sizes, additional profiles for people, pets and objects, height, and style notes in Shopify metafields when the shopper saves them in the new customer accounts. Shoppers can still view stored data and delete one subject or all additional profiles after a store changes to the Free plan.
Shopify metafields are the persistent store for profile values. Our server temporarily reads values when it calculates registration statistics or confirms a save. It does not persist profile values in our database. Product-page matching runs in the shopper's browser.
In stores that use a Hellostore theme's wishlist, the App stores what a signed-in shopper saves, namely the product ID, the product handle, an optional reason for saving, and the date and time saved, in a Shopify customer metafield (the app-owned wishlist). The limit is 200 items per shopper. Product names, prices, and images are not stored; they are fetched each time they are shown. Nothing is stored in our database.
The App requests read_customers, write_customers, customer_read_customers, and customer_write_customers, and write_app_proxy. write_app_proxy is used for the App Proxy endpoint that saves a shopper's wishlist from the storefront to the account. The customer scopes support profile metafield definitions, shopper-managed reads, writes and deletion, and registration statistics. Statistics queries do not request names, email addresses, phone numbers, or addresses. App settings and plan state are also stored in Shopify metafields.
To maintain authentication with the Shopify admin, our database stores the store domain, session ID, authentication state, access and refresh tokens, scopes, and expiry dates. When Shopify supplies an online session's merchant user information, it also stores the user ID, name, email address, locale, store-owner and collaborator status, and email-verification status. This information supports authentication and access management and is not used for shopper size statistics.
| Data | Where | Retention |
|---|---|---|
| Shopper profile values | Shopify metafields; temporarily read, but not persistently stored, by our server for statistics and save confirmation | Until deleted by the shopper; after uninstall, subject to Shopify's app-data cleanup process |
| Privacy data-request delivery metadata | Our servers (USA): the store, affected shopper, Shopify request, and received, download, and completion timestamps. Profile values are not stored | Pending requests have a 30-day response deadline and remain until completed. Completed records become eligible for deletion 30 days after completion and are removed on the next admin access or the next data request for the same store. Relevant records are also deleted on customer or shop erasure, or uninstall |
| Shopper wishlist (product ID, handle, reason for saving, date and time saved) | Shopify customer metafield (the app-owned wishlist); our server reads and writes it only while handling a save and does not store it in our database | Until deleted by the shopper, and deleted on a customer data-erasure request; after uninstall, subject to Shopify's app-data cleanup process |
| Values kept on the shopper's device (browser): the theme's wishlist, plus values used for syncing (an owner mark, the last agreed list, a list waiting to be carried over, and a list of products that could not be saved) | Inside the shopper's browser on their device; not stored on our servers | The device list is cleared when the shopper logs out or a different shopper logs in |
| App settings & stats | Settings in Shopify metafields; statistics calculated on demand and not persisted | Settings are subject to Shopify's cleanup process after uninstall |
| Authentication sessions (store domain, authentication credentials, and merchant user information supplied by Shopify; see 2-2) | Our servers (USA) | As needed for authentication and App use; deleted promptly after uninstall |
| Plan state (store domain, shop ID, plan handle, sync timestamp and identifier) | Our servers (USA); plan handle and sync identifier also in Shopify metafields | While the App is installed; our database records are deleted promptly after uninstall. Metafields are subject to Shopify's cleanup process |
The App does not send shopper profile values to the theme, other apps, or external AI services. Profile values and derived results are excluded from application logs.
Our servers do not send shoppers' wishlists to AI providers. In stores that also use Hellostore AI Staff, AI Staff uses the on-device wishlist during its conversations. That is AI Staff's own behavior and is governed by the AI Staff privacy policy.
We may query the store's billing status through the Shopify Partner API. Shopper profile values are not included in that query.
The App sets no cookies in shoppers' browsers and performs no behavioral tracking. To sync wishlists, it keeps the values listed above in the browser storage of the shopper's device.
Traffic to our servers is encrypted with TLS. Sessions, plan state, and privacy-request delivery metadata are kept in a managed database with access restricted to the minimum necessary.
Questions about this policy: support@misell-theme.com
This policy may be updated from time to time. Material changes will be announced in the App or on this page.