Privacy Policy
Privacy Policy
Last updated: July 21, 2026
This Privacy Policy applies to every app in the Mitasu brand provided by Inherit Co., Ltd. ("we") through the Shopify App Store — including Mitasu for Apparel and any apps we release in the future (together, the "Apps"). We respect the privacy of merchants (store operators) and of their stores' customers (shoppers), and we design our Apps to collect only the minimum information necessary.
1. Information we collect
1-1. Information about merchants (stores)
| Information | How it is collected | Purpose |
|---|---|---|
| Basic store information (store name, domain, email address, plan, and similar) | Shopify API (authentication at install) | Providing the App, responding to support, and sending important notices |
| Product information and data the App creates and manages (size charts, size-suggestion settings, model-worn info, complete-the-look outfits, product FAQs, material and care notes, fit-vote tallies, return-trend data, and size confidence) | Shopify API | Providing App features (displaying information on product pages and editing it in the admin) |
| Authentication session (store domain, access token) | Shopify OAuth | Secure API access to Shopify |
1-2. Information about a store's customers (shoppers)
The App does not collect or store shoppers' personal information (such as name, address, email address, or order details).
- "Fit voting" stores the choice (runs small / true to size / runs large) only as an anonymous tally (a count). We do not store any information that could identify a voter (such as IP address or cookies). The record used to prevent double-voting is kept only within the shopper's browser.
- The body measurements entered into the "size suggestion" feature (bust, waist, hip, length, sleeve, inseam, and similar) are stored only within the shopper's browser (localStorage) and are sent neither to the store nor to us. All sizing is calculated in the browser; no AI or external service is used.
- Return data imported by the merchant covers only the product handle and the return reason (or size-level counts), and contains no shopper personal information such as name, address, or order number. Any other columns are ignored on import.
- The App places no advertising or analytics tracking cookies on store pages and adds no global scripts.
2. Where information is stored, and for how long
- The data the App handles is stored entirely within the merchant's own Shopify store. It is not stored in any external database operated by us.
- Only the authentication session is stored on cloud infrastructure (Cloudflare) so the App can run; it is invalidated and deleted on uninstall.
- After uninstall, the in-store data remains in the merchant's store. You can retrieve all of it at any time via CSV export.
3. How we use information
- To provide, maintain, and improve the App's features
- To respond to support requests
- To investigate and address bugs and security issues
- To comply with applicable laws
We do not sell the information we collect to third parties, and we do not use it for advertising.
4. Third-party services (subprocessors)
| Service | Use |
|---|---|
| Shopify Inc. | App platform, data storage (the in-store data area), and billing |
| Cloudflare, Inc. | Hosting the app server and storing authentication sessions |
5. GDPR and data protection laws
The App supports Shopify's mandatory webhooks (customers/data_request, customers/redact, shop/redact). Because we hold no personal data of shoppers, there is no personal data subject to disclosure or deletion. When a store is removed, we delete the authentication information and similar data that we hold.
We operate in line with the intent of Japan's Act on the Protection of Personal Information (APPI), the EU General Data Protection Regulation (GDPR), and U.S. state privacy laws.
6. Security
All communication is encrypted with TLS. Access to the Shopify API uses only the minimum permissions authorized through OAuth, and access tokens are managed on encrypted infrastructure.
7. Children's privacy
The App does not knowingly collect personal information from children under the age of 13.
8. Changes to this policy
If we change this policy, we will announce it on this page. For significant changes, we will endeavor to give notice in the app's admin or to your registered email address.
9. Contact
For questions about this policy or our handling of data, please contact us using the details on our Support page.
Business information
Provider: Inherit Co., Ltd. / Representative Director: Takuji Uda / Contact: info@inherit.co.jp. For more, see About us.