Security and data
Last updated: October 12, 2026
What SaleGuard can touch in your store, what it keeps, for how long, and how to get it deleted.
What SaleGuard can access
In short: Three Shopify permissions: products, discounts, and customer segment names.
| Permission | Why we ask for it |
|---|---|
write_products | Read your products and variants, and change their prices for a sale, then restore them. |
write_discounts | Create and manage the discounts for the optional discount-campaign feature. |
read_customers | List the names of your customer segments, so a discount can be limited to a segment you choose. We don’t read or save individual customer records. |
SaleGuard changes prices through Shopify’s API. It doesn’t edit your theme files. The optional theme blocks (countdown, badge, shipping bar) appear only if you add them in the theme editor.
What we store
In short: Shop domain, price snapshots, sale schedules, run logs, plan and usage counters, and the access token Shopify gives us.
- Your
.myshopify.comdomain. - Product and variant IDs with the original price and compare-at price (the snapshot).
- Sale schedules, discount campaign settings and run logs: what changed, when, and the result.
- Plan and usage counters.
- The Shopify access token for your store, encrypted at rest with AES-256-GCM.
- Feedback you choose to send, with an optional reply email.
What we don’t store
In short: Nothing about your customers or their orders.
No customer names, emails, addresses, order history or payment details. We never see payment-card numbers; billing runs through Shopify.
How long we keep it
In short: Snapshots are purged 60 days after a sale ends. Everything is erased when Shopify's store-data deletion request arrives.
Price snapshots are deleted 60 days after the sale they belong to has ended. Snapshots of a running sale are never purged. After you uninstall, Shopify sends a store-data deletion request (normally about 48 hours later) and we erase everything we hold for the shop: sales, runs, snapshots, discount campaigns, usage counters, feedback, sessions and the shop record. Download the snapshot CSV from the app if you want to keep your own copy.
How to delete your data
In short: Uninstall the app, or email us.
Uninstalling starts the deletion described above. To ask for deletion sooner, or to ask what we hold, email support@getsaleguard.com with your .myshopify.com domain. We also handle Shopify’s customer data requests; since we hold no customer data, there is nothing to return or erase.
Where it is hosted
In short: Vercel for the application, Supabase Postgres for the database, Resend for email.
Traffic to the site and the app uses HTTPS. Shopify webhooks are checked against Shopify’s signature before we act on them. Access to production data is limited to the people who run the service. We don’t hold security certifications such as SOC 2 or ISO 27001, and we don’t claim any.
More detail is in the Privacy Policy. Questions: support@getsaleguard.com.