MSDSOFT ยท Rangoli Search & Filter
Privacy Policy
Effective date: 14 September 2026
Rangoli Search & Filter is operated by MSDSOFT, Kolkata, West Bengal, India. For privacy questions or requests, email msdsoftteam@gmail.com.
What this policy covers
This policy describes information processed to provide our Shopify product-search, filtering and merchandising service. Merchants control their store configurations and remain responsible for their own storefront privacy notices and choices. We handle our own support and service-administration records.
Information we process
- Store and account information: Shopify shop domain, shop name, currency, time zone, installation status, app settings and subscription status. Authentication records include access and refresh tokens and may include the authorized merchant user's Shopify identifier, name, email, locale and account role supplied by Shopify.
- Catalog information: products, descriptions, images, variants, prices, stock, SKUs, barcodes, tags, collections and selected product attributes.
- Merchant content: filter settings, synonyms, ranking rules, banners, links, campaigns, badges and configuration history.
- Product search: search text and selected filters are processed to return matching products. New shopper search/click analytics records are disabled. A search may contain personal information if a shopper types it; please do not enter sensitive information in product-search fields.
- Retired analytics: as of the 14 September 2026 catalog-only release, our conversion pixel and its data-access permissions have been removed. Rangoli no longer records visitor identifiers, product-click journeys or checkout totals for attribution. Records collected by earlier versions, if any, remain subject to the retention and privacy-request process below; retiring tracking does not automatically erase historical records.
- Operations and support: synchronization and webhook records, diagnostic errors, privacy-request records and information provided when you contact us. Infrastructure services may generate technical access logs, such as request times, network addresses and errors.
How information is used
We use information to authenticate installations, synchronize catalogs, deliver search and filters, apply merchant settings, verify subscriptions, provide support and maintain the service. Shopify processes subscription approval and billing; we do not collect payment-card details through the app.
Browser storage and analytics choices
The current release does not subscribe to Shopify pixel events or record shopper analytics, even when a store permits analytics. Product search and filtering remain available. Shopify, the merchant's theme and other installed apps have their own privacy choices and behavior, which this policy does not control.
Service providers and processing locations
Shopify and our hosting and infrastructure providers process information needed to operate the service. Our current application hosting service is supplied by AquaHost as an India-hosted VPS service. MSDSOFT operates from India. Shopify and other service providers may process information in other countries according to their own arrangements. Backup storage locations can differ from the application host; contact us for information about your store's processing arrangements.
We may disclose information when necessary to comply with law, respond to a valid legal request, or protect the security and rights of the service and its users. We do not make merchant configuration available to other stores through shared settings by default.
Retention and deletion
We retain catalog and configuration information while needed to operate the merchant's installation. Analytics, diagnostic and support records are retained as needed for their stated purposes, troubleshooting, privacy-request handling and applicable legal obligations. These records do not currently have a single uniform automatic expiry period. You may contact us to request access or deletion or to discuss a retention requirement before using the service.
Uninstalling removes the app's Shopify sessions and disables its storefront integration; it does not instantly erase every database record, uploaded file or backup. Shopify privacy requests are authenticated and recorded for review and fulfillment. Deletion handling must account for the active database, associated files, caches and relevant providers. Daily backups are maintained with a 30-day retention period under our backup practice. Residual backup copies may remain until rotation; any legally required retention is handled separately.
Your requests and choices
Depending on applicable law, you may have rights to access, correct or delete information, or to object to or restrict certain processing. Contact msdsoftteam@gmail.com. If you are a shopper, contact the store merchant first so your request can be associated with the correct store. We may ask for information reasonably needed to verify and locate a request. Do not email passwords, Shopify access tokens or payment-card details.
We review authenticated privacy requests and coordinate with the merchant where necessary. Requests are handled under applicable legal and Shopify deadlines; Shopify's mandatory privacy requests generally require action within 30 days. Certain information may need to be retained where legally required. You may also have the right to contact your local data-protection authority.
Security
We use authenticated application endpoints, Shopify webhook verification and access controls to protect the service. No method of storage or transmission is completely secure. Contact us promptly if you believe app-related information has been exposed.
Policy updates
We may update this policy as the service or our practices change. The effective date above identifies the current version. For material changes, we will provide an appropriate notice through the app or our merchant contact channels where required.