Privacy Policy
For the Orbit3D app for Shopify. Last updated 9 September 2026.
Orbit3D is a 3D product configurator for Shopify stores, published by MK-Way. This page covers the Orbit3D app specifically. The MK-Way website has its own policy at mk-way.com/privacy-policy.
The short version. Orbit3D stores your product configuration, your conversations with the setup assistant, and a record of what each shopper configured so you know what to make. It does not read your customer list, and the 3D viewer on your storefront sets no cookies and identifies nobody.
What we store
| What | Why | Personal data? |
|---|---|---|
| Your configured products: options, prices, rules, 3D bindings | It is the product setup itself | No |
| Setup Assistant conversations, and the changes they made | So a setup is resumable and auditable | Only if you type one in |
| Configuration records: the options behind a cart or order line, the price, a preview image | So you know what to make, and the price can be re-checked | Linked to an order, so indirectly |
| Usage ledger: tokens and cost per assistant turn | So spend is visible and capped | No |
| Publish history: which version went live and whether it worked | So there is an answer when something changes | No |
| Your store's contact email, store name and country | To support you and tell you when your trial is ending | Yes: your business contact details |
| Shopify session token | So the app can act on your store | No |
Two things worth saying plainly
The assistant conversation is stored as written. If you paste a customer's name or email into it, that text is stored. Nothing scrubs it, so treat the chat like any other business document.
Shopper artwork does not reach our database. An image a shopper uploads goes to your own Shopify Files with the order. We hold a link, not the picture.
What we do not do
- We do not read your customer list. No customer names, emails or addresses are requested.
- The 3D viewer on your storefront sets no cookies, sends us no analytics, and identifies no shopper.
- We do not sell, rent or share your data, and we run no advertising.
- We take no percentage of your sales, so we have no reason to watch them.
Shopify data we access
The app requests only the permissions it uses:
- Products and variants, to read what you sell and write the configuration to it.
- Files, to store 3D models and shopper artwork in your own Shopify Files.
- Metafields and metaobjects, where the published configuration lives on your store.
- Cart transforms, so the configured price is recalculated on Shopify's servers and cannot be tampered with in the browser.
- Orders, to attach a configuration to the order line it belongs to. No customer fields are read.
Who else processes it
| Who | What they handle |
|---|---|
| Railway | Hosting and the database |
| Anthropic | The setup assistant. What you type to it is sent there to generate each reply. It is not used to train their models. |
| Cloudflare | Serves this page and our public demo |
| Shopify | Your store, your files, and all billing |
We may pass your store's contact email to our own customer-relationship system so we can support you and tell you when your trial is ending. That is the only place it goes. Every charge runs through Shopify's Billing API and appears on your Shopify invoice. We never see or store a card number.
How long we keep it, and how to have it deleted
| When | What happens |
|---|---|
| While installed | Kept, because it is your working data |
| 48 hours after you uninstall | Shopify sends us a shop redaction request and we delete your products, conversations, configurations, usage records and publish history |
| On a customer request | Configuration records linked to that customer's orders are deleted immediately |
One record survives uninstall in reduced form: your store's domain and the dates of your free trial. We keep it so that uninstalling and reinstalling cannot restart a trial indefinitely. It carries no contact details, no customer information and no order data, and it is the only thing retained.
There is no separate archive and no backup kept outside the database. You can request deletion at any time by emailing us, and you do not have to uninstall to ask.
Your rights
Depending on where you are, you may have the right to see what we hold about you, to correct it, to have it deleted, or to object to how it is used. Email us and we will act on it. We will not ask you why.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will update the date at the top and tell merchants inside the app rather than quietly editing this page.
Contact
MK-Way, privacy@mk-way.com, mk-way.com.
Orbit3D is a product of MK-Way. This policy covers the Orbit3D Shopify app. This website sets no tracking cookies of its own.