Verkode — Privacy policy
Last updated: 31 August 2026
What Verkode does
Verkode generates PDF barcode labels for the products in a Shopify store. It reads catalogue data and produces a file, and it does not send data anywhere except back to the browser of the merchant who asked for it.
It writes to the store in exactly one place: the Barcodes & SKUs page, where a merchant can have missing barcodes and SKUs generated. Every proposed code is shown before anything is written, nothing is written until the merchant asks for it, and a field that already holds a code is never overwritten. Nowhere else in the app changes any product.
What it reads
- Product variants: title, SKU, barcode, price
- Inventory levels
- Incoming inventory shipments and the quantities on them
These are covered by the write_products, read_inventory and read_inventory_shipments access scopes. write_products is what lets the app fill in a missing barcode or SKU on request; it is the only write scope, and the app requests no scope that touches orders or customers.
What it does not read
No personal data about a store's customers. Verkode has no access to orders, customers, addresses, email addresses or payment information, and it does not ask for it.
What it stores
- The Shopify session token for the shop, so the app can call the Admin API on its behalf
- Label templates the merchant creates: sizes, fonts, what to print
- A count of labels generated per shop per month, for plan limits
- The shop logo, when the merchant uploads one to print on labels
Product data is read at the moment a label is generated and is not retained: it lives in the request that produces the PDF and nowhere else. Generated PDFs are not stored on the server.
Where it is stored
In a PostgreSQL database hosted by Neon in the European Union (eu-central-1). The application runs on Vercel.
Deletion
When a shop uninstalls the app, its session is deleted. Shopify then sends a shop/redact request 48 hours later, and everything else belonging to that shop — templates and usage counts — is deleted too. The customers/redact and customers/data_request webhooks are implemented and return nothing, because no customer data is held.
A merchant can request deletion at any time by writing to the address below.
Third parties
None. Barcodes and PDFs are generated on the server; nothing is sent to an external service, and there is no analytics or tracking in the app.