Privacy Policy

Assembly Line Pro by Tofu Solution — Effective April 28, 2026

This Privacy Policy describes how Tofu Solution ("we", "us", or "our") collects, uses, and protects information when you install and use Assembly Line Pro (the "App") on your Shopify store. By installing the App you agree to the practices described below.

1. Information We Collect

Shop and Account Data

When you install the App through the Shopify App Store, we receive your shop domain, store name, email address, and an OAuth access token that grants the App the permissions you approved. This is necessary to authenticate API requests on your behalf.

Product and Inventory Data

The App reads your product variants and inventory levels from Shopify in order to track finished-good stock. It writes inventory quantities back to Shopify when you publish or sync. No product data is shared with third parties.

App-Specific Data You Enter

Raw material definitions, bill-of-materials (BOM) configurations, stock quantities, and other data you create inside the App are stored in our database and associated with your shop. This data is used solely to operate the App for your store.

Google OAuth Tokens (Optional)

If you choose to connect the Google Sheets integration, we store the OAuth access token and refresh token issued by Google. These tokens are used exclusively to read from and write to the spreadsheet created in your own Google Drive. We do not access any other files in your Google account. Tokens are stored securely and never shared with third parties.

Usage and Log Data

Our servers may record standard technical information such as request timestamps, HTTP status codes, and error messages for debugging and reliability purposes. This data does not include personal information beyond your shop domain.

2. How We Use Your Information

We use the information collected solely to:

We do not use your data for advertising, profiling, or any purpose unrelated to operating the App.

3. Data Storage and Security

Your data is stored on secure cloud infrastructure. All data is scoped to your shop domain — no data is shared between merchants. We use industry-standard practices including encrypted connections (HTTPS), access controls, and regular dependency updates to protect your information.

Google OAuth tokens are stored in our database. While we take reasonable measures to secure this data, no transmission or storage method is 100% secure. If you believe your credentials have been compromised, you can revoke the App's Google access at any time from your Google Account permissions page.

4. Third-Party Services

The App interacts with the following third-party services:

We do not sell, rent, or share your data with any other third parties.

5. Data Retention and Deletion

We retain your data for as long as the App is installed on your store. When you uninstall the App, we process a deletion request via Shopify's mandatory GDPR webhooks and remove your shop data from our systems within 30 days.

You may also request deletion of your data at any time by contacting us at the email address below. We will respond within 30 days and confirm when deletion is complete.

6. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, please contact us using the details below.

7. Cookies

The App does not use tracking cookies or analytics cookies. Session cookies may be set by the Shopify embedded app infrastructure to maintain authentication state within the Shopify Admin.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. Continued use of the App after any changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Tofu Solution
Email: [email protected]