Privacy Policy – Nova Combined Listings
Last updated: November 1, 2026
Nova Combined Listings (“the app”, “we”, “us”) is a Shopify app operated by Hey Jak. It lets merchants link separate products so they appear as variants on one product page. This policy explains what data the app collects, how it is used, and your rights.
1. Information we collect
Store information
Your shop domain and the access tokens Shopify gives the app to authenticate.
Product data the app needs to build groups: product titles, handles and images.
App configuration
Product groups you create: internal names, option names, choice labels, swatch colors and swatch images.
Your storefront display settings.
These are stored in your own Shopify store as app-owned metaobjects and metafields.
Merchant contact and account details
Your shop name, contact email, phone number and Shopify plan, read from Shopify, and the number of product groups you have created.
Usage data
Anonymous usage and interaction data about how the app is used (for example pages visited and features used), linked to your shop domain.
Shopper data
The app does not collect or store personal information about your store’s shoppers or customers. The storefront component only reads your group configuration to show the product choices, and it does not use cookies or browser storage to track shoppers.
2. How we use your information
To show product groups and choices on your storefront.
To save and apply your settings.
To manage your subscription through Shopify’s billing system.
To provide customer support and answer your requests.
To understand how the app is used, fix problems and improve it.
3. Analytics and support services
We use trusted third-party services for product analytics and customer support chat. To provide these, we share your shop domain, shop name, contact email, phone number, Shopify plan and the number of product groups you have created. We use this data only to understand how the app is used, improve it, and answer your support requests. We do not sell your data. We do not share data about your shoppers with these services.
4. Where data is stored
Group and settings data is stored in your Shopify store (metaobjects and metafields).
Authentication session data is stored in a database hosted with our hosting provider.
We do not sell, rent or trade your data.
5. Shopify access permissions
The app requests only the permissions it needs:
write_products: to link products into groups and store each product’s group membership.
write_metaobject_definitions and write_metaobjects: to create and save your product groups and their choices.
read_files: to read the swatch images you choose for your groups.
6. Data retention and deletion
When you uninstall the app, your session data is deleted.
Within 48 hours of uninstall, Shopify notifies us and we remove all remaining data stored for your shop.
Group and settings data stored in your Shopify store as app-owned data is removed by Shopify when the app is uninstalled.
The app stores no customer data, so customer data requests and erasure requests from Shopify require no action.
You can ask us to delete your contact and usage data held by our analytics and support services at any time by emailing us.
7. Security
Authentication through Shopify OAuth and session tokens.
All data in transit is encrypted with HTTPS.
Access to our database is restricted.
We apply regular security updates.
8. Your rights
You can ask us to:
give you a copy of the data we hold about you,
correct inaccurate data,
delete your data,
stop processing your data.
Email us and we will respond within a reasonable time and within any legal deadlines.
9. Changes to this policy
We may update this policy. Changes are posted on this page with a new “Last updated” date.
10. Contact
Hey Jak
Email: mail@heyjak.com