Skip to content
GISL Press Kit

Privacy policy

For the GISL Press Kit Shopify app · Effective September 10, 2026

GISL Press Kit (“the app”) is developed and operated by Golden Info Systems Limited. This policy explains what the app accesses, what it stores, and how that data is deleted. It covers the app only — it does not cover the separate Golden Info Systems Limited company website.

What the app can access

Section titled “What the app can access”

When you install the app, Shopify asks you to approve a fixed set of permissions. The app requests only these:

  • Manage metaobjects and metaobject definitions — so it can create and edit the press_release records that hold your content.
  • Manage files — so the image picker can show media that already exists in your store’s Files area, and so a featured image you upload is saved into it.

The app does not request access to customers, orders, products, payments, or any other part of your store, and therefore cannot read them.

What we store on our servers

Section titled “What we store on our servers”

One session record per installed store, containing your store’s domain, the OAuth access token Shopify issues to the app, and the list of permissions you granted. This is what keeps you signed in and lets the app make API calls to your store.

The app uses offline access tokens only. It does not build profiles of individual staff members, and it does not track who in your team made a given change.

Where your press release content lives

Section titled “Where your press release content lives”

Titles, summaries, body content, categories, dates, source links, and featured images are saved into your own Shopify store as press_release metaobjects. That data is held by Shopify under your control — the app reads and writes it, but keeps no copy on our servers. Images are stored in your own Shopify Files; the app does not re-host them elsewhere.

Storefront visitors

Section titled “Storefront visitors”

Press release detail pages are rendered through a Shopify app proxy, so shoppers stay on your domain. These pages set no cookies, run no analytics, and perform no visitor tracking or profiling. No personal data about your storefront visitors is collected by the app.

Customer data requests and deletion

Section titled “Customer data requests and deletion”

The app subscribes to all three of Shopify’s mandatory compliance webhooks:

  • Customer data request — the app holds no customer data, so there is nothing to return.
  • Customer redaction — no customer data is stored, so there is nothing to erase.
  • Shop redaction — every session record belonging to your store is permanently deleted.

Your session record is also deleted immediately when you uninstall the app. We do not retain backups of access tokens after deletion.

Sharing

Section titled “Sharing”

We do not sell, rent, or share your data. Nothing is passed to advertisers, data brokers, or third-party analytics services. Data is exchanged only between your store and Shopify’s APIs in order to provide the app’s functionality.

Security

Section titled “Security”

All traffic to the app is served over HTTPS. Access tokens are stored on infrastructure operated by Golden Info Systems Limited and are used solely to authenticate the app’s requests to Shopify on your behalf.

Changes to this policy

Section titled “Changes to this policy”

If this policy changes, the effective date above will be updated. Any change that materially affects how data is handled will be reflected here before it takes effect.

Contact

Section titled “Contact”

Questions about this policy, or about data held for your store, can be sent to info@goldeninfosystems.com.