Privacy Policy

When you run a scan we receive the store address you enter. If you unlock the breakdown we also store your email address, the store address, the resulting Health Score and the date of the scan.

Free public scans do not require Shopify access. Website connections store your account email, store address, approved permissions, encrypted access and refresh credentials, and audit reports. The embedded Shopify app uses a verified Shopify session instead of a separate website account and stores shop-keyed installation details. Passwords are handled by our authentication provider, not stored in audit reports.

Optional one-click fixes require your approval for product-write permission. We store the original field value, proposed value, approval/status history and timestamps so a change can be reviewed and undone. Uninstalling removes the affected installation's fix records along with its audits and credentials from active storage.

To show your report, to operate and improve the service, to contact you about your scan and ShopFix updates, and to prevent abuse. You can unsubscribe from marketing emails at any time.

We do not sell your data. We use service providers (such as hosting and email delivery) who process data on our behalf. We may disclose data if required by law.

If you choose “Draft with AI”, we send the selected product’s title, description, product type, vendor and tags, variant title when relevant, selected metafield and optional product notes to our AI service provider to create a draft. Notes are request-only drafting context, not automatically saved as Shopify fields. We do not send Shopify credentials, customer records or order records to the AI provider. Generating a draft does not change your store; only your subsequent approval can sync a supported fix.

Disconnecting a store removes its saved connection, encrypted access token and connected audit reports from active storage. Uninstall ShopFix in Shopify to revoke its access there. You may also request account deletion by email.

When Shopify sends us a verified uninstall or store-deletion notification, we remove the affected installation’s connection, encrypted token and connected audit reports from active storage. We retain minimal notification records to handle duplicate deliveries safely; these do not include customer details or the notification body. Hosting-provider backups may persist according to the provider’s retention practices.

We do not request or store Shopify customer or order records. Shopify customer-data requests therefore have no corresponding customer records in ShopFix to export or delete. Your ShopFix account and public scan records are separate from Shopify shopper records.

We keep scan records while they are useful for the service. You may request access to, correction of, or deletion of your data by emailing hello@shopfix.app.

We use only what is needed for the site to work. We do not currently run advertising trackers.

We may update this policy and will change the date above when we do.