Information we process
Store Guardian processes information needed to authenticate and monitor a Shopify store. This can include the store's Shopify domain, Shopify authentication and session information, and basic merchant account information made available during authentication, such as name, email address, and locale.
Through Shopify's APIs, the app may access store information required for its monitoring features, including products, variants, inventory, collections, themes, and discounts. The app uses this information to identify catalog, storefront, and revenue monitoring signals.
When a merchant connects Store Guardian's Web Pixel, the app receives consented storefront events such as product views, add-to-cart, checkout starts, payment-information submission, and completed purchases. Stored event fields are limited to an event ID, event type, timestamp, product and variant IDs when available, order amount when available, and currency. The app does not intentionally store customer names, email addresses, phone numbers, or postal addresses from these storefront events.
Merchants may also provide an alert email address and monitoring preferences, such as notification frequency, timezone, quiet hours, scan settings, and data-retention settings.
How we use information
We use information to authenticate the Shopify store, perform read-only catalog and storefront checks, calculate monitoring and revenue signals, display findings and history, generate alerts and reports, provide requested email notifications, maintain security, troubleshoot the service, and operate and improve Store Guardian.
We do not sell merchant information or use Store Guardian data to build advertising profiles for unrelated third parties.
Shopify permissions
Store Guardian uses the Shopify permissions shown during installation, including read access for products, inventory, orders/discounts, and themes, plus the permissions needed to connect its Web Pixel and receive consented customer-event data. The app is designed to keep merchant store changes under merchant control and does not automatically modify products, prices, images, descriptions, inventory, orders, themes, or discounts.
Web Pixel and consent
Store Guardian uses Shopify's Web Pixel framework for storefront measurement. Shopify controls the customer's consent choices for customer events. Store Guardian's server accepts only the event types required for its monitoring features and stores the limited event fields described above.
Service providers and international processing
We use Shopify for authentication, APIs, and app-platform services; Vercel for application hosting; Neon for PostgreSQL database hosting; and Resend for email delivery when a merchant enables alert emails. GitHub may process source code and deployment information for development and deployment operations. These providers may process information in countries other than the merchant's country.
Retention and deletion
Store Guardian retains monitoring history, alerts, analytics events, settings, and related operational records only for as long as they are needed to provide the service or according to the retention settings available in the app. Older operational records are automatically pruned according to those settings.
After uninstall, merchants may request deletion of Store Guardian data associated with their store. We also process Shopify's mandatory privacy and data-redaction requests for data held by the service.
Security
We use encrypted HTTPS connections, access controls, authenticated Shopify requests, bounded event ingestion, least-privilege access, and managed cloud infrastructure. No internet service can guarantee absolute security, so we continuously review the service for security and reliability issues.
Your privacy choices and rights
Depending on applicable law, you may have rights to request access, correction, deletion, or restriction of personal information. You may also uninstall Store Guardian or disable optional monitoring and email features from the app. Contact us using the address below for privacy requests.
Changes to this policy
We may update this policy when our data practices or the service changes. The effective date at the top of this page will be updated when material changes are published.