wejav.pl · KitForge
KitForge Privacy Policy
Last updated: October 18, 2026
KitForge is a Shopify application published by WEJAV (wejav.pl) — a software house based in Poznań, Poland. This policy explains what data we process when you install and use KitForge.
Controller
WEJAV
ul. Dębicka 18a
61-316 Poznań, Poland
Website: https://wejav.pl
Email: office@wejav.pl
Phone: +48 519 683 852
Shopify Partner organization ID: 5030188
Data we process
- Shop data: shop domain, plan information, and app installation status.
- Merchant content: kit configurations (titles, tiers, slots, product handles, discount settings) stored to power the Theme App Extension.
- Authentication: offline access tokens required for Shopify Admin API calls, stored securely in our session database.
- Billing: Shopify subscription charge identifiers and plan selection. We do not store credit card numbers.
- Support (optional): if you contact us via in-app chat or the support form — name, email, and message content.
Customer personal data
KitForge does not require access to end-customer personal data to operate. Storefront kit building runs in the merchant’s theme. If Shopify sends mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact), we acknowledge and process them according to Shopify’s requirements and applicable GDPR rules.
How we use data
- Provide and improve KitForge features
- Sync kit metaobjects to the merchant’s shop
- Manage app subscriptions and feature entitlements
- Respond to support requests
- Comply with legal and Shopify Partner obligations
Legal basis (GDPR)
Where GDPR applies, we process data to perform the contract for providing the app (Art. 6(1)(b)), to comply with legal obligations including Shopify Partner requirements (Art. 6(1)(c)), and — where relevant — on the basis of legitimate interests in securing and improving the service (Art. 6(1)(f)).
Data sharing
We do not sell personal data. Data is processed through Shopify APIs and our application hosting provider solely to operate KitForge. We do not share shop data with unrelated third parties for marketing.
Data retention
Session and kit data are retained while the app is installed. After uninstall or a shop redact request, we delete associated shop data within Shopify’s required timelines.
Security
Access tokens and shop data are stored with industry-standard safeguards. Communication with Shopify and the app host uses HTTPS.
Your rights
Depending on your jurisdiction, you may request access, rectification, erasure, restriction, or portability of personal data we hold, and lodge a complaint with a supervisory authority (in Poland: UODO).
Contact
Privacy / GDPR requests: office@wejav.pl
General contact: office@wejav.pl · wejav.pl