Privacy policy

01Information CatalogGuard processes

CatalogGuard is a merchant-facing Shopify app. It processes the Shopify store domain and the account details Shopify provides for authentication, such as staff user identifiers, names, email address, locale, granted permissions, and app-session credentials.

To provide catalog audits and requested tools, CatalogGuard reads product details such as product identifiers, titles, descriptions, product type, vendor, tags, status, SEO fields, image references, and, when enabled, published language and translation data. It does not request Shopify customer or order data.

CatalogGuard also stores information merchants create or choose in the app, including audit findings, saved views, catalog rules, brand voice preferences, writing options, AI drafts, translation drafts, review history, alert settings, and approved Agency store connections. Agency connections contain store domains and approval status; only reports from stores that approve a connection are shared with that Agency workspace.

Shopify processes subscription billing. CatalogGuard can receive a plan or subscription status, but does not receive or store payment card details.

02How information is used

CatalogGuard uses this information to authenticate the merchant, scan products, show evidence and reports, save preferences and drafts, run requested checks, manage plan limits, and protect the app from stale or unauthorized requests. It is not used to sell personal information or target advertising.

Catalog scans are read-only. Product content is changed only after a merchant reviews and explicitly approves a save in Shopify.

03AI features

When a merchant deliberately starts an AI action and approves the request, CatalogGuard sends the selected product content, any selected Shopify-hosted product image, merchant-supplied facts, and relevant writing preferences to OpenAI through its API to prepare a suggestion. If the merchant starts a queued or background batch, its approved products are sent as the batch is processed. The merchant reviews the result; an AI response does not change Shopify by itself. OpenAI processes submitted information under its applicable service terms and privacy documentation.

04Service providers and sharing

CatalogGuard relies on Shopify for store authentication, Shopify API access, and billing; Vercel for hosting and application execution; and Neon for the production database. OpenAI receives information only for AI actions the merchant chooses. If email digests are enabled after sender setup, Resend is used to deliver them to the address configured by the merchant.

These providers process information to provide their services to CatalogGuard. CatalogGuard does not sell, rent, or share store data for advertising. Agency data is shared only after the client store explicitly approves the connection, and each store remains responsible for approving its own product changes.

05Retention and deletion

CatalogGuard keeps store information while the app is installed and as needed to provide reports, settings, saved drafts, and history. Product snapshots are limited to the latest three completed scans. Product change history is removed after 90 days; prepared, unsaved changes expire sooner.

When the app is uninstalled or Shopify sends a shop-redaction request, CatalogGuard deletes the store's reports, settings, drafts, usage records, and Shopify app sessions. A minimal inactive installation marker may remain to reject requests that were already in progress during deletion. Infrastructure providers may retain backups or security logs according to their own retention practices.

06Security and international processing

CatalogGuard uses authenticated Shopify sessions and HTTPS for connections to the app. Its hosting, database, and optional AI and email providers may process information in countries other than the merchant's location, depending on their infrastructure and service configuration.

07Privacy requests and contact

Merchants can uninstall CatalogGuard or use Shopify's privacy request process to request removal of store data. For privacy questions or other requests, contact the app developer using the support contact shown in CatalogGuard's Shopify App Store listing.