Privacy policy

Last updated: August 6, 2026

Catalog Guardian operates the Catalog Guardian Shopify app. This policy explains how the app processes information when a Shopify merchant installs or uses it.

Information we process

We process the shop domain, Shopify authorization and session data, product catalog fields selected for auditing, scan findings, fix history, subscription status, and operational logs. The app does not request or store customer, order, payment, or checkout data.

Purposes and sharing

Information is used to authenticate the shop, audit and repair catalog data, enforce plan limits, prevent abuse, troubleshoot incidents, and meet legal obligations. It is shared only with Shopify and infrastructure providers required to operate the service, or when legally required. We do not sell personal information or use product data for advertising.

AI-draft generation

On the Pro plan, merchants can request search-listing drafts. Only when a merchant uses this feature does the app send the product title, vendor, product type, and description to the configured AI provider. Drafts require merchant review before any Shopify change is made. Shopify account, session, customer, and payment data are not sent to the provider.

Retention and security

Catalog scans, findings, and fix history are retained for 90 days. Shop-scoped application records and sessions are deleted when the app is uninstalled or when Shopify sends a shop redaction request. Short-lived operational backups and logs may remain until normal secure expiry. We use encrypted transport, least-privilege access, authenticated webhooks, and audited application changes.

Your choices

Store owners can uninstall the app to stop processing. For access, correction, deletion, or privacy questions, contact [email protected]. We may need to verify that the requester controls the relevant Shopify store.