Privacy policy

Effective date

August 27, 2026

Individual Entrepreneur Hlib Oreshchuk operates PromoCheckup and is responsible for the processing described in this policy.

Information we process

• Shopify store identity, installation state, subscription state, primary domain, and public storefront URL.
• Product identifiers, handles, titles, publication eligibility, and public product URLs obtained with the read_products permission.
• Public storefront observations needed for a scan, including displayed prices, compare-at prices, sale labels, structured product data, and the pages where evidence was observed.
• Scan results, finding history, job status, error codes, and bounded operational logs.
• A notification email address only when a merchant enables email alerts.
• An optional storefront access password when a merchant chooses to scan a password-protected Online Store. It is encrypted at rest and decrypted only in memory to establish a Shopify storefront session.
• Shopify authentication sessions and related merchant-account metadata needed to keep the embedded app signed in securely.

PromoCheckup does not request customer, order, checkout, payment, theme-write, or product-write permissions. It does not place tracking cookies or pixels on a merchant's storefront.

How information is used

• Authenticate the merchant and provide the requested app service.
• Run read-only storefront checks and show evidence-backed findings.
• Access a password-protected storefront only when its merchant has saved the optional storefront password.
• Schedule scans and send alerts that the merchant has enabled.
• Verify Shopify-managed subscription access.
• Protect, troubleshoot, and improve service reliability.

We do not sell merchant data or use it for third-party advertising. Optional notification email processing is based on the merchant's explicit setting and can be disabled at any time.

Service providers

Information is shared only as needed with Shopify, the infrastructure provider that hosts PromoCheckup, and the transactional email provider used for enabled notifications. These providers can process information in countries other than the merchant's country. We require them to process information only for the services they provide to PromoCheckup.

Retention and deletion

Shop-scoped data is kept while PromoCheckup is installed so merchants can review scan and finding history. Uninstalling cancels queued work, disables alerts, removes the saved storefront password, and removes Shopify sessions. When Shopify sends the mandatory shop/redact request, PromoCheckup deletes the store record and its products, scans, findings, jobs, notifications, and remaining sessions.

Routine encrypted backups, when enabled, are retained for no longer than 30 days and are used only for disaster recovery. Redacted data is not intentionally restored to the live service. Anonymous aggregate event counts may be retained because they no longer identify a store or individual.

Security

PromoCheckup uses Shopify authentication, minimum API permissions, encrypted transport, server-side secret storage, bounded outbound requests, and access controls scoped to the authenticated store. No internet service can promise absolute security, but suspected incidents are investigated and contained.

Data rights and contact

Merchants may request access, correction, deletion, or restriction of their information, subject to applicable law. Shopify also sends PromoCheckup its mandatory customer data and redaction requests. Because PromoCheckup does not collect customer or order data, customer-specific requests are acknowledged without a customer-data record to return or delete.

Contact saleguard.support@gmail.com.

Postal address: Volodymyra Salskoho, Kyiv, 04060, Ukraine

Policy changes

Material changes will be posted on this page with a revised effective date. Changes do not reduce rights that apply under applicable law.