Privacy Policy

1. What we collect, and why

In short: Store domain, product price snapshots, sale/operation records, and — only if you send feedback — a message and an optional reply email.

On this website we count page views on our own server (page, language, referring site, and whether the visitor looks like a bot). We do not store IP addresses or any identifier for this. The website also uses Vercel Web Analytics, which works without cookies. The free Store Price Audit tool sends the store domain you type to our server so it can read that store’s public product list; we do not save the domain or the result.

2. What we do not collect

In short: No data about your customers. No orders, no names, no addresses, no payment details.

• We do not collect or store personal data about your storefront customers — no customer names, emails, addresses, order histories or payment details. The app reads and writes product prices and, for the discount-campaign feature, creates and manages discounts in your store.
• The app asks Shopify for two permissions (access scopes): write_products (change prices) and write_discounts (create and manage discounts for campaigns). It has no permission to read customer records. The Security and data page explains this in more detail.
• We do not see your payment card details. All billing runs through Shopify Billing.
• We do not sell or rent any data to anyone, and we do not use your data for advertising.

3. How long we keep it

In short: Price snapshots are purged 60 days after a sale ends. When Shopify sends its store-data deletion request, we erase everything we hold for your shop at once.

• Price snapshots: up to 60 days after the sale they belong to ends, then they are deleted. If Shopify’s store-data deletion request arrives sooner, they are erased sooner (see shop/redact below). Download the snapshot CSV if you want to keep your own copy.
• Sale and run records are operational records of price changes on your products; they contain no personal data. They are kept while the app is installed to show you your history.
• Feedback and session data are erased when we receive the shop-erasure webhook described below, or earlier on request.

4. GDPR and Shopify's privacy webhooks

In short: We implement all three of Shopify's mandatory privacy webhooks, and because we hold no customer personal data, customer requests are simple to honor.

Shopify sends apps three mandatory privacy webhooks. The Service implements and honors all three:

• customers/data_request — a customer asked for their data. Since we store no customer personal data, the answer we can provide is: there is nothing held about that customer.
• customers/redact — a customer asked to be deleted. Same situation: we hold no customer personal data, so there is nothing to erase, and we record that the request was processed.
• shop/redact — sent by Shopify after you uninstall the app (normally about 48 hours later). We erase everything we hold for your shop in one step: sales, runs, price snapshots, discount campaigns, usage counters, feedback, sessions and the shop record itself.

If you are in the EU/EEA, UK or another region with data-protection rights (access, correction, deletion, portability, objection), you can exercise them at any time via the contact below — you do not have to wait for a webhook.

5. Where the data lives and who processes it

In short: Your data sits with our hosting provider and passes through Shopify. Nobody else.

The parties that process data for us:

• Shopify — the platform the app runs on; all API traffic to your store goes through Shopify.
• Hosting & database: Vercel (application hosting) and Supabase Postgres (database), under their standard data-processing agreements.
• Email: Resend, for transactional emails such as failed-restore alerts.

We protect data in transit with HTTPS and restrict access to production data to the people who operate the Service.

6. Deletion requests and contact

In short: Email support@ and we delete your data — you don't need to cite a law to ask.

To request deletion of your shop’s data, a copy of what we hold, or anything else about privacy, email support@getsaleguard.com. Deletion requests are honored regardless of where your business is located.

The data controller is SaleGuard, reachable at support@getsaleguard.com.

We use your data to run the Service you asked for (performance of the contract) and to keep it reliable and secure (legitimate interests). If you are in the EU/EEA or UK, you can also complain to your local data-protection authority. We do not sell or share personal information, including for California residents under CCPA/CPRA.

7. Changes to this policy

In short: If what we collect ever changes, this page changes first and we tell you.

If we change what data we collect or how we use it, we will update this page and, for material changes, notify you inside the app or by email before the change takes effect. The “Last updated” date at the top reflects the current version.