FitGate Privacy Policy

Last updated: November 13, 2026

FitGate ("the app") is a Shopify app made by Wyatt Chamberlin, who publishes apps as Centaur Apps ("we", "us"). It lets a Shopify store ask shoppers fitment questions, such as their vehicle's year, make and model, and stops orders for parts that don't fit. This policy explains what information the app handles, why, and what happens to it.

It covers two groups of people: merchants who install FitGate in their Shopify store, and shoppers who use a store that has FitGate installed.

Information we handle

From merchants and their Shopify store

When a merchant installs FitGate, Shopify gives the app access to the store under the permissions the merchant approves. FitGate uses:

• Store details: the store's Shopify ID, its domain names, and the app's access token for the store. The token is encrypted when stored.
• Product information: product and variant IDs, titles, handles and SKUs, and, if the merchant runs a scan, product descriptions and tags. FitGate uses these to show products in the app and to find parts that may need fitment rules.
• The merchant's FitGate setup: fitment rules, questions, settings and return costs that the merchant enters. These are saved in the merchant's own Shopify store. A copy of the rules and settings is kept on our servers so the app can answer fitment checks quickly.
• Files the merchant imports or exports: spreadsheets (CSV files) of rules and return costs, and scan results.

FitGate does not access the store's orders, customers, payments or staff accounts.

From shoppers

When a shopper uses FitGate's fitment box on a product page:

• Their fitment choices and answers, such as "2020 · Honda · Civic" and "Body style: Sedan", are sent to our servers to check whether the part fits.
• When they add the part to their cart, their answers are saved on that cart line and then on the order, inside the merchant's Shopify store, so the merchant knows what the shopper said. We don't keep a copy of orders.

The same applies when an AI shopping assistant checks fitment or creates a cart link through FitGate on a shopper's behalf.

FitGate never asks shoppers for their name, email, address, phone number or payment details, and the fitment box doesn't use cookies or store anything in the shopper's browser.

At checkout, the fitment check runs inside Shopify, as a Shopify Function. That check doesn't send anything to our servers.

What we keep about fitment checks

• Daily totals: how many checks and blocked orders each product had each day, and through which channel (storefront, checkout or an AI assistant).
• Recent blocked orders: the last 50 blocked checks for the store, each with the time, the product and the vehicle chosen. The merchant sees these on the app's Dashboard.

None of this identifies a shopper.

Technical information

Like any website, our servers see the network (IP) address of each request. We use it in memory, for at most one minute, to stop the service from being flooded with requests. Our hosting provider, Google Cloud, also records request logs that include IP addresses; these are kept for 30 days and then deleted.

How we use information

Only to run FitGate for the merchant:

• to show the merchant's products and rules in the app;
• to check whether a part fits the shopper's answers, on the storefront, at checkout and for AI assistants;
• to show the merchant how many wrong-fit orders were stopped;
• to keep the service secure and working, and to fix problems.

We don't sell information, use it for advertising, or share it with anyone except the service providers below.

Service providers

• Shopify hosts the merchant's store, where the rules, settings and order answers live.
• Google Cloud (United States, region us-central1) hosts our servers and databases: Cloud Run, Firestore, Cloud Storage, Cloud Tasks and Cloud Logging.
• Zoho hosts our email, so it holds any message you send to our support or privacy address.

How long we keep information

The rules, settings and answers saved in the merchant's Shopify store belong to the merchant's store and stay there until the merchant deletes them or the store is closed. FitGate's in-app "Factory reset" removes the rules and settings it saved in the store.

Deleting your data

• Merchants: when you uninstall FitGate, the access token is deleted straight away. About 48 hours later Shopify asks us to delete the store's data, and we delete everything we hold for the store: our copy of your rules and settings, your daily totals and recent blocked orders, and your import and export files. You can also email us to ask for deletion sooner.
• Shoppers: we don't hold information that identifies you. Your fitment answers are on your order in the store you bought from; ask that store to see or delete them. If Shopify sends us a request about your data, we answer it, but there is nothing about you for us to return or delete.

Your rights

Depending on where you live (for example under the GDPR in the European Union and the UK, or the CCPA in California), you may have the right to see, correct or delete information about you, or to object to how it's used. Merchants can contact us directly. Shoppers should start with the store, since the store decides how FitGate is used; you're also welcome to contact us.

For shopper information, the merchant is the controller and we process it on their behalf.

Security

Connections to our servers use HTTPS. Access tokens are encrypted when stored. Only our own servers can use the app's Shopify access tokens: Shopify refuses them from anywhere else. Access to our hosting is limited to Wyatt Chamberlin.

Children

FitGate is a tool for businesses. It isn't directed at children, and we don't knowingly collect information about children.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how merchants' data is used, we'll tell merchants in the app or by email first.

Contact

Wyatt Chamberlin, Centaur Apps
Email: privacy@centaurapps.com