Privacy policy

KaratSync: Live Gold Prices · Last updated 7 October 2026

Summary

KaratSync updates product prices in a Shopify store from live metal rates. It does not collect, receive, or store personal information about your customers.

What KaratSync stores

What KaratSync does not store

No customer names, email addresses, shipping addresses, phone numbers, order contents, or payment details. The app does not request access to customer or order data, and its permissions are limited to reading and writing products.

Contacting you about the app

Shopify shares your store’s name, the store owner’s name and the store contact email with the app. We use them only to send you one check-in email about this app, about a week after you install it, asking how it is working, and to answer support requests. If you uninstall the app, we may send you one email asking what didn’t work for you. We never sell or share them, never use them for unrelated marketing, never ask for a review by email, and never offer anything in exchange for a review. Reply “unsubscribe” or email kash@codejainfotech.com to opt out at any time.

Per-product pricing data

Item weight, purity, stone value, and price locks are stored as metafields on your products inside Shopify, not in our database. They remain in your store if you uninstall the app.

Third parties

Metal rates are retrieved from metals.dev and cross-checked against gold-api.com. These requests ask only for market rates and contain no information about your store, your products, or your customers.

The app runs on Fly.io, which hosts the application and its database. No other parties receive your data.

Data retention and deletion

Uninstalling the app deletes your settings, formulas, update history, and stored session for that store. Your store’s name and contact details are kept only until Shopify’s shop redaction request, about 48 hours after uninstall, so we can send the one email described above; then they are deleted with all remaining data for the store. Shopify’s mandatory compliance webhooks are implemented. Because no customer personal data is held, customer data requests and customer redaction requests are acknowledged and logged with nothing to return or erase.

Security

Traffic is served over HTTPS. Access tokens are stored server-side and are never exposed to the browser. Incoming webhooks are verified against Shopify’s signature before being processed.

Changes

If this policy changes, the date above is updated. Material changes will be communicated to installed merchants.

Contact

Questions about this policy or your data: kash@codejainfotech.com.