Privacy Policy

Data we collect from your Shopify store

When you install the app we receive, via Shopify's API, your store profile: store name, primary domain, contact email, owner name, phone number, Shopify plan, and whether the store is a development store. We use this to operate the app, send lifecycle emails (welcome, digest, uninstall), and provide support. We also store the redirects and settings you create in the app.

Storefront 404 data

The app's theme embed records broken (404) URLs on your storefront: the requested path, the referring URL, and the visitor's browser user-agent (used only to distinguish bots from people). We do not collect names, emails, IP addresses, or any other personal data of your store's visitors, and we set no tracking cookies on your storefront.

Google user data (Search Console integration)

If you choose to connect Google Search Console, the app requests read-only access to your Search Console data (scope: webmasters.readonly). We access two things: the list of your verified Search Console properties (so you can pick one), and search analytics page URLs for the chosen property (so we can detect pages Google ranks that now return 404 on your store).

We use this data solely to provide that feature. The OAuth refresh token is stored encrypted at rest (AES-256-GCM). We do not sell, share, or transfer Google user data to any third party; we do not use it for advertising; and no human reads it except with your permission for support, for security purposes, or where required by law. The data is deleted when you disconnect the integration in the app's settings or uninstall the app.

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention and deletion

When you uninstall the app, your access tokens are revoked immediately. All remaining store data (404 logs, redirect metadata, settings, and any Google connection) is permanently erased when Shopify sends the mandatory data-erasure webhook, approximately 48 hours after uninstall. You can also request earlier deletion by emailing us.

Third-party processors

We use Shopify (platform and billing), Postmark (transactional email), and our hosting provider to run the service. Each processes data only as needed to provide the app. We never sell data to anyone.

Changes

If we make material changes to this policy we will update this page and the date above. Continued use of the app after a change means you accept the updated policy.