FourEyes legal

Privacy policy

What FourEyes collects, why, who sees it and when it is deleted.

The short version

  • FourEyes reads products, variants, prices, compare-at prices and unit costs from Shopify. It does not read orders, customers or payment data.
  • It stores the Shopify user ID of staff who open the app so a second person can approve a change, and a cached flag for whether that user is the account owner so only the real owner can turn off dual control. It does not receive staff names or emails.
  • It keeps a lifetime count of published changes so reinstalling does not reset the first 50 free changes.
  • We do not sell data. We do not use it for advertising.
  • When Shopify sends a shop redaction request, all of the store's data is deleted immediately.
  • Questions: foureyes@wharfly.app

Last updated: 22 October 2026

1. Who we are

Who operates FourEyes. FourEyes is a brand operated by Hunain Khatri, an individual based in Malaysia. FourEyes is not a registered company. On this page, "we" means Hunain Khatri operating FourEyes.

This policy covers the FourEyes app for Shopify and the page at wharfly.app/foureyes. You can reach us at foureyes@wharfly.app.

2. What we collect

  • Store details: the store's .myshopify.com address, currency, installation time and subscription status.
  • Staff identifiers: the Shopify user ID in the App Bridge session token when a staff member opens the app. We use it to enforce a second-person approval and to attribute actions. We do not receive staff names, emails or avatars.
  • Catalog data: product and variant IDs, titles, SKUs, prices, compare-at prices, unit costs and inventory-item IDs.
  • Change records: change sets, before and after values, approvals, rejections, publish attempts, verification results and timestamps.
  • Published-change counter: the lifetime number of verified field changes. It is kept when the app is uninstalled so a reinstall does not reset the first 50 free changes, and deleted on shop redaction.
  • Technical data: request metadata processed by our hosting provider (Cloudflare), such as IP address, user agent and timestamps, for security and reliability.

We do not collect customer data, order data, payment data or storefront visitor data. The app does not request customer or order scopes and adds no storefront scripts.

3. How we use it

  • Authenticate the app with Shopify and keep the installation working.
  • Sync the catalog, show diffs, apply approved changes and verify what Shopify stored.
  • Enforce approval rules and maintain the audit trail.
  • Manage the free allowance and Shopify Billing subscription.
  • Provide support, investigate abuse and keep the service secure.

4. Legal bases (EEA and UK)

Where GDPR or UK GDPR applies, we rely on performance of a contract (providing the app), legitimate interests (security, reliability and support), legal obligations, and consent where required.

5. Who we share data with

  • Shopify processes the installation, session tokens and billing as part of the Shopify platform.
  • Cloudflare hosts the app and database and processes request metadata on our behalf.
  • We do not sell personal data and do not share catalog data with advertisers.

6. Retention and deletion

  • While the app is installed, we keep store, catalog and change data so the app can work.
  • After uninstall, we keep the store record and published-change counter for up to 30 days, then delete the rest. The counter is part of the store record and is also deleted on shop redaction.
  • When Shopify sends a shop/redact request, we delete the store's data immediately, including the lifetime counter.
  • Audit history is displayed for 12 months. Cloudflare backup copies expire within 30 days.

7. Security

Shopify access tokens are encrypted at rest with AES-256-GCM. Traffic uses TLS. We request the minimum Shopify scopes needed for price and cost changes. Access to production systems is restricted.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, or to object to processing. Contact foureyes@wharfly.app. You can also complain to your local data protection authority. FourEyes does not store customer data; customer requests should go to the merchant, and we support Shopify's customer redaction webhook with a no-op confirmation.

9. Cookies

The app uses a short-lived, signed cookie for the OAuth install flow. In local development only, it may use development identity cookies. Production authentication in the embedded app uses Shopify session tokens, not cookies. The app uses no advertising cookies.

10. International transfers

Cloudflare processes data on its global network. Where data leaves the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Changes and contact

We will post changes on this page and update the date above. Material changes will be announced in the app. Contact foureyes@wharfly.app.