Privacy notice

Variant Wishlists · Updated November 5, 2026

Variant Wishlists by Variant Commerce helps customers save products to multiple lists, manage those lists and share gift ideas. This notice describes the current app and pilot recovery arrangements.

Who operates the app

Christopher Hutchinson, doing business as Variant Commerce
1200 Ross St, Suite 400
Amarillo, TX 79102, United States

Privacy and support contact: info@variant-commerce.com.

Information the app uses

The app uses a store identifier and a signed-in Shopify customer identifier to keep each customer’s lists separate. Saved information includes list names, product and variant references, product images and links, wanted quantities, priorities, private notes, public gift notes, archive/removal state and related dates. Relevant order and line-item references and quantities are used to update gift purchases, cancellations and refunds. Store connection information is used to operate the installed app.

Wishlist sign-in does not request your saved customer-profile name, email, phone number or saved addresses. If you choose recipient delivery, you enter the recipient name and address directly and give explicit consent for checkout disclosure. Support messages contain the information you choose to send us.

How information is used and shared

Information is used to operate lists, show the correct products, support gift checkout and purchase updates, respond to support and privacy requests, and maintain security and recovery. Shopify handles customer sign-in and checkout. The retailer where you create a list manages your shopping relationship.

Lists are private until the owner creates a sharing link. Anyone who receives that link can view the shared list name, product information, public gift notes and gift quantities. Private notes and customer identifiers are excluded from the shared page. Owners can replace or turn off a sharing link; this cannot recall information someone already copied.

Recipient delivery is optional. After the owner opts in, gift buyers can use and see the delivery address at Shopify checkout and on order-related pages. The shared list itself does not display it. Turning delivery off applies to future checkouts and cannot recall details already disclosed. Buyers may instead use their own delivery address.

The retailer’s normal list overview excludes private notes and delivery addresses. Request-specific customer-data exports can include those fields for the matching customer and store. The retailer must verify the requester before sharing an export. App connection credentials are excluded from customer exports.

Storage and service providers

The current app server and database run on Render in Oregon, United States. Saved recipient delivery details and catalog connection credentials are encrypted by the app. Recovery copies are encrypted before upload to a private Google Drive folder; recovery keys are kept separately from those files.

Healthchecks.io receives empty success/failure signals for operational monitoring, with ordinary connection metadata such as server IP address and event time. It does not receive wishlist contents, customer identifiers, delivery details or app credentials. Monitoring alerts go to the operator’s support email.

Provider privacy information: Render, Google and Healthchecks.io. Shopify and each retailer also provide their own privacy information.

Retention and recovery

Removing an item or archiving a list supports restore/undo and does not erase those underlying records. Archiving also removes the saved recipient address, revokes active sharing links and releases active gift reservations. A customer erasure request deletes matching lists and delivery data and removes relevant buyer/order associations. Uninstalling removes active store data and app sessions. Shopify’s own order records are managed separately by Shopify and the retailer.

Eligible expired unpaid reservations and revoked sharing records are cleaned up after 90 days. Completed privacy-request records are cleaned up after 30 days; pending requests stay until handled. Purchase and event records needed for accurate gift settlement remain until their applicable cleanup or erasure.

Encrypted on-server backups are kept for up to seven days, with at most eight snapshots. After a newer automatic Drive copy is verified, automatic copies older than 30 days move to recoverable Drive Trash; Google normally permanently deletes trashed files after another 30 days. If fresh-copy verification fails, cleanup waits. A separately approved manual pilot recovery copy has no automatic expiry and remains subject to a reviewed retirement decision.

A separate encrypted privacy-recovery record is kept outside the backup-copy cleanup. It contains store identifiers, installation/deletion dates and keyed customer/order references, without raw customer/order identifiers, names, addresses, wishlist contents or credentials. It must remain available while older recovery copies could be restored. The app applies this record before serving a restored database so later deletions are not rolled back. Retiring that record requires review of all retained recovery copies.

Access, correction and deletion requests

Contact the retailer where you created your wishlist to request access, correction or deletion, including requests under the GDPR or applicable US state privacy laws. The retailer can use Shopify’s customer privacy-request workflow, and Variant Commerce helps process app data requests. For questions about this app’s handling of information, contact info@variant-commerce.com.

Changes to this notice

The date at the top of this page identifies the latest update. We will update this notice when the app’s information-handling arrangements change.