worklea

Category Sorter for BigCommerce privacy policy

Last updated 7 November 2026

Category Sorter for BigCommerce is a BigCommerce app made by Worklea Services ("we", "us"). It keeps the products in a store's categories in the order the merchant chooses, with sold-out products at the bottom and pinned products at the top. This policy explains what data the app uses when a store installs it, why, and what happens to that data. (Our Shopify apps Sold Out Sorter and Collection Sorter have their own policies.)

Our terms of service include a data processing agreement that sets out how we handle this data on your behalf.

Data the app accesses

When a merchant installs Category Sorter, BigCommerce lets the app do the following through BigCommerce's API:

  • Products (read and change): read each product's ID, name, creation date, price, stock level, stock tracking setting, availability and categories, and set the order of products within each category. The app never changes the products themselves.
  • Categories: their names, their place in the category tree and their default sort.
  • Store information (read only): the store's default category sort.
  • Webhooks: notifications from BigCommerce when a product or its stock changes, which contain the product's ID, so the app knows which categories to re-sort.

When the merchant or a staff member opens the app, BigCommerce tells us their user ID and email address, and the store owner's user ID and email address.

Category Sorter does not request or read orders, or customers' names, email addresses, phone numbers or addresses. It doesn't add anything to the storefront.

Data the app stores

  • Access credentials: the store's identifier and the access token BigCommerce issues to the app, plus the scopes that were granted, the store owner's user ID and email address, and the date of installation. The access token is encrypted (AES-256) before it is stored.
  • App users: the user ID and email address of each person who opens the app. A person is removed when the store owner revokes their access to the app.
  • Rules: for each category the merchant sets up, the chosen sort, whether sold-out products go last, and the IDs of pinned products.
  • Positions: for each sorted category, the product IDs and their place in the order, so restocked products can go back to where they were.
  • Sorting history: when each category was last sorted, whether it worked, and how many products were sorted, sold out and moved.
  • Store settings: the sold-out settings and which categories they apply to.
  • Server logs: technical logs that may include the store identifier, kept for troubleshooting.

Product names, prices and stock levels are read while sorting but not stored. Product descriptions, images and orders are not read.

How we use data

Only to provide the app: to work out each category's order, to save that order to BigCommerce, to show the merchant what was sorted, and to let authorized staff open the app. We do not sell data, use it for advertising, or share it with third parties, except the services we need to run the app:

  • BigCommerce, which provides the store data and the app's place in the control panel.
  • Our hosting provider, Hostinger, whose servers run the app and store the data described above.

Payments

Category Sorter for BigCommerce is free during early access. If we add a paid plan, we'll update this policy before charging anyone, and we will never see or store card details.

Retention and deletion

  • When a store uninstalls Category Sorter, we delete its access credentials, app users, rules, positions, sorting history and settings from our server straight away. Categories keep the order they had when the app was uninstalled.
  • Server logs are capped in size and the oldest entries are deleted automatically.

Security

The app is served only over HTTPS. Requests from BigCommerce are checked with a signature to confirm they really come from BigCommerce, and the app's pages only open through the BigCommerce control panel. Webhook notifications are checked with a secret only BigCommerce and the app know. Access tokens are encrypted before they are stored, on a server with restricted access that receives security updates.

Your rights

Merchants and their staff can ask what data we hold about them, and ask us to correct or delete it, by emailing support@worklea.org.

Changes

If we change how the app uses data, we'll update this page and the date at the top.

Contact

Worklea Services, support@worklea.org