Moving Day: Bulk Import Export Privacy Policy

Last updated: October 24, 2026

Moving Day: Bulk Import Export ("Moving Day" or "the app") is provided by Duskford Digital, a trade name of SAB Ventures LLC ("we", "us"), 30 N Gould St, STE R, Sheridan, WY 82801, USA. You can contact us at movingday@duskforddigital.com.

This policy explains what information the app processes when a Shopify merchant installs it and uses it to import and export products. The app doesn't ask for, read or store information about the merchant's customers.

Our role

Merchant information: we decide how it is used.
Information about the merchant's customers: the app doesn't collect any. If a merchant puts personal data into a product file or into product text, we process it on the merchant's behalf, only to provide the app. The merchant controls it.

What we collect

From merchants, when the app is installed

Store details from Shopify: the store's domain, time zone and currency.
Access credentials: the access credentials Shopify issues so the app can work with the store, and which we delete when the app is uninstalled.
App settings: the store's plan and a monthly count of rows imported.

When the merchant imports a file

The app reads the file in the merchant's browser and sends its rows to us. While the import exists we keep:

the file's name and its column headings, and how the merchant matched columns to Shopify fields;
every row of the file, cell by cell, with the result for that row and any message about it;
what the import would change and did change: for each product, variant, metafield and stock level, the value in the store before the import, the new value, and whether Shopify accepted it (the plan and the undo record);
the import's options and results, such as the stock mode, the counts, and which step stopped if one did.

This is the merchant's product data: titles, descriptions, handles, prices, SKUs, barcodes, tags, vendors, metafield values, image addresses and stock quantities. The app reads these from the store with the permissions the merchant approved, which cover products, inventory, locations and the Online Store publication.

When the merchant exports products

We read the products the merchant chose, write them to a CSV or Excel file, and keep the file (compressed) so the merchant can download it. The file holds the same kinds of product data as above.

What we don't collect

We never read or store customers' names, emails, phone numbers, addresses, orders or payment details. The app has no access to them. We do not collect or store payment card details.

Data requests

When Shopify passes on a customer's request for their data, we keep the customer's Shopify ID and the orders the request names, so the merchant can see the request. The app holds no data about that customer, so there is nothing to send. We delete the request 30 days after it arrives.

Server logs

Like any website, our hosting provider records technical details of each request to the app, such as the IP address, browser type and time. We use these logs only to keep the app running and secure. Our own logs name the store's domain (or our internal ID for it), import and export job IDs, and webhook names. When something fails they also record the error message, which comes from Shopify, our database or the network and can sometimes include a short piece of product text, such as a title. We don't write file rows, customer information or access credentials to our logs.

How we use it

To show the merchant a dry run of an import, apply it to their store through Shopify, show the results and, within 7 days, undo it.
To build and deliver export files.
To apply the merchant's plan limits. Plans are billed by Shopify.
To provide support, keep the app secure, and meet legal obligations.

We do not sell personal information. We do not use it for advertising. We do not make automated decisions about anyone that have legal or similarly significant effects.

Who we share it with

We share information only with the service providers needed to run the app, and only for that purpose:

Shopify: the platform the app runs on, billing, and the store the changes are written to.
Vercel: application hosting.
Neon: database hosting.

We may also disclose information when the law requires it, or as part of a merger or sale of the business. In that case the commitments in this policy continue to apply.

Where it is stored

Information is stored with our providers in the United States. Where data from the EU, the UK or elsewhere is transferred to the US, we rely on appropriate safeguards, such as our providers' standard contractual clauses.

How long we keep it

Imports (the file's rows, the plan, the undo record and the results) are deleted 7 days after they finish, and an import that was committed is never deleted while it can still be undone (7 days after the commit). An upload that never completed is deleted 7 days after it started. An import that is still running is not deleted.
Export files are deleted 7 days after the export finishes.
Merchant information (store details, plan, usage counts) is kept while the app is installed, and after uninstall until the store's data is deleted.
Store data after uninstall: we delete all of the above when Shopify tells us to (about 48 hours after uninstall), and within 7 days of uninstall at the latest.
Customer data requests are kept for 30 days, so the merchant can see them.
Server logs are kept by our hosting provider for a short time and then deleted automatically.

The app runs its deletions once a day, so a deletion can land up to a day after the times above.

Security

We protect the information we hold:

encryption in transit (HTTPS) and at rest, including backups;
access to production systems is limited to the owner, with strong, unique passwords and two-factor authentication;
any direct access to production data is logged, and the log is reviewed monthly;
a written security incident response process.

Your rights

Merchants can ask to access, correct, export or delete their information by emailing movingday@duskforddigital.com. A merchant can also delete an import's data sooner by emailing us.
Customers should contact the store. The app holds no data about them; when the store passes us a request through Shopify, we help the store respond within the time the law requires.
Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have rights to:
- access, correct and delete your information;
- object to or restrict processing;
- data portability;
- not be discriminated against for using these rights.

We do not sell or share personal information for cross-context behavioral advertising.

Children

The app is for businesses and is not directed to children under 16, and we do not knowingly collect their information.

Changes

If this policy changes, we will update the date above. If the change is significant, we will tell merchants by email or in the app.

Contact

Duskford Digital (SAB Ventures LLC), 30 N Gould St, STE R, Sheridan, WY 82801, USA. movingday@duskforddigital.com