Privacy Policy
Draft — pending operator approval. Applies once published with the operator's legal name and physical address.
1. What we collect
- Email address and store URL you enter for a free scan.
- Payment and subscription data via Stripe (we never see or store card numbers).
- Basic request metadata (IP, user agent) for rate limiting and abuse protection.
- Scan results: public page data captured during the synthetic checkout path (page URLs, visible text, screenshots of public pages).
2. How we use it
- Run the free scan and deliver the report.
- Operate the subscription: daily scans, fail alerts, billing.
- Send account/status emails. We do not sell data and send no marketing mail without consent.
3. What we do NOT do
- Never place a real order, enter a card, or charge anything on your store.
- Never sell or rent personal data.
- No security audits, no PCI assessments.
4. Storage & retention
Scan reports are kept while your subscription is active plus the retention period required for billing records. You can request deletion: support@shopguard.example.
5. Third parties
- Stripe processes payments (their privacy policy applies to payment data).
- Email provider delivers transactional mail.
6. Your rights
Access, correction, deletion, objection. CAN-SPAM: every commercial email has a working unsubscribe; opt-outs are honored immediately and permanently.
7. Changes
Subscribers are notified by email on material changes.