MerchDesk privacy policy
Last updated October 8, 2026
MerchDesk is a Shopify app made by Fantasium Media. It builds and updates Bestsellers, Trending and New Arrivals collections. This policy explains what information MerchDesk uses, what it keeps, and how it’s deleted.
MerchDesk is built to use as little data as possible. It reads order data to rank products and doesn’t store any of it.
Information we use
From Shopify, through the permissions you approve at install:
- Order line items: product IDs, quantities, line prices and order dates. These are used in memory while a collection updates, then discarded. No order records are saved to our database.
- Product details: creation date, status, tags, type, vendor, and which sales channels a product is published to.
- Sales channel publishing, so the collections MerchDesk creates are visible to shoppers.
- Your store’s domain and the Shopify session.
MerchDesk doesn’t request, read or store customer names, email addresses, phone numbers or addresses.
Created in MerchDesk:
- the settings for each collection you create: its type, size, time window, exclusions and product order
- each collection’s status, when it last updated, and any error from its last update
- the product IDs most recently added to each collection
Billing is handled by Shopify. We don’t keep a copy of your plan.
Support messages
If you contact us through the support form in MerchDesk, the name, email and message you enter, along with your store’s domain, are emailed to our support inbox. This happens only when you send the form. MerchDesk doesn’t store support messages.
How we use it
Only to build and maintain the collections you set up, and to show you their status in MerchDesk. Order data is used for ranking and nothing else. We don’t sell your data, and we don’t share it with anyone for marketing or advertising.
Service providers
- Shopify runs the platform MerchDesk is part of and handles billing.
- Fly.io hosts the app and its database in the United States.
- Resend delivers support messages you send from MerchDesk to our inbox.
MerchDesk uses no other outside services. Each handles data under its own privacy policy.
Storage and security
Data is stored in a database on Fly.io in the United States. It travels over HTTPS/TLS, and database access requires credentials.
How long we keep it
We keep your collection settings while MerchDesk is installed. When you uninstall, Shopify notifies us and your collection settings are deleted. Any remaining session records are removed when Shopify sends its shop data-deletion request (shop/redact).
Because MerchDesk never stores order or customer data, there’s nothing of that kind to keep or erase. We still answer Shopify’s customer data requests (customers/data_request and customers/redact), confirming that no such data exists.
The collections MerchDesk created stay in your store after you uninstall, as ordinary collections you can edit or delete. Uninstalling removes our access straight away, so we can’t remove them at that point. If you’d rather they were gone, delete them in MerchDesk before uninstalling.
Your rights
- See your data in MerchDesk at any time.
- Delete it by uninstalling MerchDesk.
- Ask us for an export, or for deletion without uninstalling, by emailing the address below.
- If you’re in the EEA or UK, you also have a right to data portability and can complain to your data protection authority.
GDPR roles
Merchants are the data controllers. Fantasium Media acts as a data processor and handles personal data only as needed to provide MerchDesk.
Children
MerchDesk is for merchants and their staff. We don’t knowingly collect information from children under 16.
Changes
If this policy changes, we’ll update the date at the top of this page.
Contact
Fantasium Media, Bozeman, Montana. Email support@deskapps.app or use the contact form.