Last updated 19 October 2026
Privacy policy
Fitmark is a size chart and "find my size" app for Shopify stores, made by Xilma (PT Xilma Teknologi Mandiri, xilma.id) in Indonesia. This page explains what the app stores, why, and how to have it deleted.
In short: Fitmark does not collect personal data about your shoppers. Their height, weight and body measurements never leave their browser. We keep only what your store needs to show size charts, plus anonymous counts if you use Studio analytics.
Who this applies to
This policy covers merchants who install Fitmark from the Shopify App Store ("you") and the people who shop in those stores ("shoppers"). Xilma is the data controller for the store data described below.
What we store about your store
When you install Fitmark, Shopify gives the app access to your store. We store:
Fitmark asks Shopify only for permission to write products (write_products), which it uses to save each chart to your products as a metafield. It does not read your orders, customers or payment details.
If you import a chart from a photo, screenshot or PDF, that file is sent to Anthropic, whose Claude AI model reads the table and returns it to the app. We do not keep the file: it is used for that one import and discarded. Anthropic processes it under its commercial terms, which do not allow it to train models on it. Please upload size charts only, not documents with personal data.
We do not store the names or email addresses of you or your staff. Billing goes through Shopify, so we never see your card or bank details.
What we store about shoppers
No personal data. When a shopper uses "Find my size", the calculation runs in their browser. Their height, weight and measurements are not sent to us. So shoppers do not have to type them again on the next product, the size guide keeps the last values in the shopper's own browser (local storage). They stay on that device, and the shopper can remove them by clearing the site's data in their browser.
Fitmark sets no cookies and does not use any tracking or advertising tools. The values kept in local storage are never read by us or used for tracking.
On the Studio plan only, the size guide reports anonymous counts so you can see how it is used. When a shopper leaves a product page, the page may send us: the product ID, whether the guide was opened, which size "Find my size" suggested, and which size the shopper chose. We add these to daily totals per product and size. The report contains no measurements, no customer or visitor IDs and no IP-based profiles, and it cannot be linked to a person. Daily totals are kept for 90 days and then deleted.
Where the data is kept
The app runs on Google Cloud (Firebase App Hosting) in Singapore. Its database is a managed Postgres database from Neon. Both providers process data only to run the app for us, under their own security and data processing terms. Data moves over encrypted connections.
The size charts shown to shoppers are copied into your Shopify store as metafields, so they are also held by Shopify under Shopify's privacy policy.
Who we share it with
We do not sell or rent data, and we do not share it with anyone except the hosting providers above, Anthropic for file imports, and Shopify, as needed to run the app. We will disclose data if the law requires it.
How long we keep it
- Charts, assignments and rules: while the app is installed.
- Studio daily totals: 90 days.
- After you uninstall, the app's access to your store ends straight away. Shopify then sends us a request 48 hours later, and we delete all of your store's charts, rules, totals and access tokens.
The chart copies in your products' metafields stay in your store until you delete them or remove the products.
Your rights
You can view, change or delete your charts at any time in the app. To ask for a copy of your data, or for it to be deleted before you uninstall, email us. We answer within 30 days. Because we hold no shopper personal data, requests that Shopify forwards on behalf of shoppers need no action from us, and we confirm that when asked.
If you are in the European Economic Area, the United Kingdom or another region with privacy laws, you also have the rights those laws give you, including the right to complain to your local data protection authority.
Children
Fitmark is a tool for businesses and is not directed at children.
Changes to this policy
If we change what we collect, we will update this page and the date at the top before the change takes effect.
Contact
Xilma (PT Xilma Teknologi Mandiri), Indonesia
Email: admin@xilma.id