Fitment Sync
Last updated: 16 August 2026
Fitment Sync is a Shopify app that lets shoppers find auto parts that fit their vehicle. This policy explains exactly what the app stores, why, and for how long.
The short version. Fitment Sync requests read access to your product catalog, plus the scope Shopify requires to run the storefront search through an app proxy. It cannot read your orders, your customers, or your payment information, because it was never granted access to them. It does not store personal data about your shoppers.
| Data | Why it is needed |
|---|---|
Your shop domainexample.myshopify.com |
To keep each merchant's data separate. |
| Product catalog copy Product and variant IDs, SKU, handle, title, image URL |
Fitment files reference parts by SKU or part number. The app needs a copy of your catalog to match those to the correct product in your store. |
| Fitment data you upload Vehicle year, make, model, submodel, engine, drive type, body style, part number, brand, position, quantity |
This is the data the app exists to serve. It is yours; you upload it and you can replace or remove it at any time. |
| Import history File name, and counts — how many were added, updated, and could not be read. Not the row content itself. |
So you can see what changed, and answer "why isn't this part showing up?" without contacting support. |
| Diagnostic error records What failed (import, export, billing check, product sync), when, and a shortened error message |
So the app can show you what recently went wrong instead of asking you to reproduce it. The message is the error text itself, cut to 200 characters, with recognised secrets removed — access tokens, passwords inside connection strings, and signed download links. It can still contain values you supplied, such as a file name or a URL you imported from. The latest 50 are kept per shop; older ones are deleted as new ones arrive, and all of them go when your shop's data is deleted. |
| Access token | Issued by Shopify when you install the app. Used to read your catalog. Revoked automatically when you uninstall. |
When a shopper picks their vehicle, that selection is saved in their own browser using local storage, so they do not have to select it again on their next visit. Clearing browser data removes it.
The selected vehicle is also sent to Fitment Sync — through Shopify's signed app proxy, from the store's own domain — because that is how the app returns the parts that fit it. Every step of the picker does this: the year is sent to look up the makes, the year and make to look up the models, and so on. Fitment Sync does not store the shopper's vehicle selection in its database, and does not use it for advertising, profiling or behavioural tracking. It is used to answer the request and then dropped.
Shopify adds a logged_in_customer_id parameter to app proxy
requests when the shopper is signed in to the store. Fitment Sync does not read,
store or use it.
| Scope | What it allows |
|---|---|
read_products |
Read product and variant details, so uploaded part numbers can be matched to products in your store. Read only — the app cannot modify your products. |
write_app_proxy |
Required by Shopify to set up the app proxy that serves the storefront fitment search from your own domain. It allows nothing else — no access to products, orders, customers or any other store data. |
No other scope is requested. In particular, the app has no access to orders, customers, checkouts, or any customer personal data. If a future feature requires another scope, Shopify will ask you to approve it explicitly before it takes effect.
While the app is installed, you can update or replace your fitment data through the import tools. Uninstalling triggers deletion as described above.
Fitment Sync does not sell data, and does not share it with advertisers or data brokers. Data is processed by:
Data may be disclosed if required by law, or where necessary to investigate abuse or protect the service.
Depending on where you are located, you may have the right to access, correct, export or delete the data described here. Because the app stores merchant data rather than personal data about individuals, most such requests are satisfied by uninstalling the app, which triggers deletion as described above.
Fitment Sync implements Shopify's mandatory data-request and data-deletion webhooks. Requests submitted through Shopify are handled automatically.
If this policy changes in a way that affects what is collected or how it is used, the date at the top of this page will be updated. Material changes will be communicated to installed merchants.
Questions about this policy, or about data held by the app: support@fitmentsync.com