Privacy policy

Shelfproof is operated by Webgro Ltd, registered in England and Wales, which is the data controller for the information described here.

What we collect

When a merchant installs Shelfproof, we store:

• The shop’s myshopify.com domain, name, contact email, currency and timezone.
• For products the merchant chooses to track: title, handle, SKU, barcode, price, image URL and variant count.
• The competitor page URLs the merchant supplies, and the prices we read from them.
• An access token allowing us to read those products and write our own metafields.

What we do not collect

We hold no data about a merchant’s customers. We do not request access to orders or customer records, and our app does not have permission to read them.

The optional price-match form on a merchant’s product pages submits to that merchant’s own Shopify contact form. The shopper’s name, email and message go to the merchant directly and never reach Shelfproof.

Where it is held

• Database: Neon, London (AWS eu-west-2).
• Application: Vercel, London (lhr1).
• Shopify holds the underlying store data; their terms and privacy policy govern that.

Backups held by our infrastructure providers may be replicated within their networks under their own terms.

How long we keep it

• Price history is kept for the length your plan states, between 30 and 730 days, and is deleted automatically after that.
• When you uninstall the app, we stop all processing immediately and delete everything associated with your shop when Shopify sends the mandatory erasure request, normally 48 hours later.
• A record that an install and uninstall happened is retained for accounting purposes.

Who else processes it

• Shopify Inc, for the app platform and billing.
• Vercel Inc, for hosting.
• Neon Inc, for the database.

We do not sell data, and we do not use it to train models.

Competitor prices

Prices we read from public competitor pages are business information, not personal data. How we gather them, and how a site owner can stop us, is described on our crawler page.

Your rights

Under UK and EU data protection law you may request a copy of the data we hold about you, ask us to correct or delete it, or object to our processing it. Email privacy@shelfproof.app and we will respond within 30 days. You may also complain to the Information Commissioner’s Office.