Last updated: May 2026

Last updated: May 2026

Privacy policy

This policy explains what personal data Scayla Apps Ltd. collects, why we collect it, and what we do with it.

This policy explains what personal data Scayla Apps Ltd. collects, why we collect it, and what we do with it.

Who we are

Scayla Apps Ltd. is a company registered in England and Wales, with its registered office at Larks Mead, Upper Warren Avenue, Reading, RG4 7EB. We build and operate Shopify apps — currently Redirect Pro, Shopifeed, and Editr — and operate the website at scayla.io. For any privacy-related questions or requests, contact us at privacy@scayla.io.

Scayla Apps Ltd. is a company registered in England and Wales, with its registered office at Larks Mead, Upper Warren Avenue, Reading, RG4 7EB. We build and operate Shopify apps — currently Redirect Pro, Shopifeed, and Editr — and operate the website at scayla.io. For any privacy-related questions or requests, contact us at privacy@scayla.io.

What this policy covers

This policy covers data collected when you install or use any of our Shopify apps, and data collected when you visit scayla.io. It does not cover data collected by Shopify directly - for that, refer to Shopify's Privacy Policy.

This policy covers data collected when you install or use any of our Shopify apps, and data collected when you visit scayla.io. It does not cover data collected by Shopify directly - for that, refer to Shopify's Privacy Policy.

Data we collect and why

When you install one of our apps, Shopify shares the following with us: your name, store email address, myshopify.com domain, Shopify plan, and store country. We use this to set up your account, communicate with you about the app, and provide support.


We do not store your customers' personal data. Where our apps need to interact with order or customer data — for example, Editr accessing order details to enable self-serve editing — this happens at runtime within your Shopify store only. That data is not sent to or stored on our servers.

When you use our apps, we use PostHog to collect analytics data including which features are used, when, and how often. Events are associated with your store's myshopify.com domain. We use this to improve our apps and identify bugs. PostHog may also record usage sessions.


When you visit scayla.io, we use Google Analytics to understand how visitors use the website. This may involve cookies. No personally identifiable information is collected beyond standard analytics data such as page views, browser type, approximate location, and referral source. We do not use advertising cookies, retargeting pixels, or any other tracking technologies beyond Google Analytics.

When you install one of our apps, Shopify shares the following with us: your name, store email address, myshopify.com domain, Shopify plan, and store country. We use this to set up your account, communicate with you about the app, and provide support.


We do not store your customers' personal data. Where our apps need to interact with order or customer data — for example, Editr accessing order details to enable self-serve editing — this happens at runtime within your Shopify store only. That data is not sent to or stored on our servers.

When you use our apps, we use PostHog to collect analytics data including which features are used, when, and how often. Events are associated with your store's myshopify.com domain. We use this to improve our apps and identify bugs. PostHog may also record usage sessions.


When you visit scayla.io, we use Google Analytics to understand how visitors use the website. This may involve cookies. No personally identifiable information is collected beyond standard analytics data such as page views, browser type, approximate location, and referral source. We do not use advertising cookies, retargeting pixels, or any other tracking technologies beyond Google Analytics.

Marketing

We will only send you marketing emails if you have explicitly opted in from within one of our apps. You can unsubscribe at any time using the link in any marketing email. We do not sell or share your contact information with third parties for marketing purposes.

We will only send you marketing emails if you have explicitly opted in from within one of our apps. You can unsubscribe at any time using the link in any marketing email. We do not sell or share your contact information with third parties for marketing purposes.

Third-party services

To operate our apps and website, we share limited data with trusted providers. Shopify handles app distribution and authentication directly. PostHog receives your store domain and usage events for product analytics and session recording. Freshdesk receives your name, email, store domain and support correspondence to power our customer support. Google Analytics receives anonymised website usage data only. Each provider operates under its own privacy policy and data processing terms. Where required, we have data processing agreements in place.

To operate our apps and website, we share limited data with trusted providers. Shopify handles app distribution and authentication directly. PostHog receives your store domain and usage events for product analytics and session recording. Freshdesk receives your name, email, store domain and support correspondence to power our customer support. Google Analytics receives anonymised website usage data only. Each provider operates under its own privacy policy and data processing terms. Where required, we have data processing agreements in place.

Data retention

We retain your merchant account data — name, email, and store domain — for as long as your app subscription is active, and for up to 48 hours after you uninstall an app. In line with Shopify's mandatory webhook requirements, if we receive a request to delete merchant or customer data we will action it within 30 days, unless we are legally required to retain it.

We retain your merchant account data — name, email, and store domain — for as long as your app subscription is active, and for up to 48 hours after you uninstall an app. In line with Shopify's mandatory webhook requirements, if we receive a request to delete merchant or customer data we will action it within 30 days, unless we are legally required to retain it.

Your rights

Depending on where you are located, you may have rights including: access to a copy of the data we hold about you; the right to correct inaccurate data; the right to request erasure of your data; the right to object to how we process your data; the right to receive your data in a portable format; and the right to withdraw consent where we rely on it. These rights apply under UK GDPR, EU GDPR for EU-based merchants, and applicable laws in other jurisdictions.

To exercise any of these rights, email privacy@scayla.io. We aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office at ico.org.uk, or with the relevant authority in your country.

Depending on where you are located, you may have rights including: access to a copy of the data we hold about you; the right to correct inaccurate data; the right to request erasure of your data; the right to object to how we process your data; the right to receive your data in a portable format; and the right to withdraw consent where we rely on it. These rights apply under UK GDPR, EU GDPR for EU-based merchants, and applicable laws in other jurisdictions.

To exercise any of these rights, email privacy@scayla.io. We aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office at ico.org.uk, or with the relevant authority in your country.

Data transfers

Scayla is based in the United Kingdom. Some of our third-party service providers, including PostHog and Freshdesk, may process data outside the UK and EU. Where this is the case, we ensure appropriate safeguards are in place — such as standard contractual clauses — in line with UK GDPR requirements.

Changes to this policy

We may update this policy from time to time. Continued use of our apps or website after a policy update constitutes your acceptance of the revised terms.

Contact

For any questions about this policy or to exercise your data rights, email privacy@scayla.io.

Apps that do what they say.

Apps that do what they say.

Apps that do what they say.