Privacy Policy

What Market Feed Guard does

Market Feed Guard is a Shopify app that monitors a merchant's product feed against their Shopify Markets configuration, checking for pricing, currency, and product-matching issues, and notifying the merchant by email when issues are found or resolved.

Information collected from Shopify

When a merchant installs Market Feed Guard, Shopify grants the app access via OAuth with the read_products and read_markets scopes only. The app does not request or hold access to customer data or order data.

We store, per installed shop:

• OAuth session data required to call the Shopify Admin API on the merchant's behalf: the shop domain, an access token, the granted scope, and token expiry/refresh metadata (this app uses Shopify's expiring offline access tokens, which are refreshed automatically). This identifies the store's connection to the app, not any individual staff member or customer.
• Product and variant data read live from the Shopify Admin API at check time (product title, SKU, barcode/GTIN, and market-resolved price/currency) in order to compare it against the merchant's feed. The most recent comparison result is stored so the merchant can see their current feed-check status, and includes: the feed's own offer/item ID (not necessarily the same value as a SKU), the feed's price and currency, the matched Shopify variant's internal identifier and product title, which matching method was used (SKU or GTIN), the Shopify price and currency, and the comparison outcome (for example, match, price mismatch, or currency mismatch). Raw GTIN/barcode values are used only to find a match at check time and are not stored in this comparison result.

Information provided by merchants

When setting up monitoring, a merchant provides:

• Feed URL: the URL of the merchant's own product feed. The app fetches this URL (HTTPS only) to read the feed's contents for comparison; it does not store the raw feed file, only the comparison results described above.
• Market and country selection: which Shopify Market and country the feed should be checked against.
• Notification email address: an email address the merchant chooses to receive alert and recovery notifications, and whether notifications are turned on.

Technical and operational logs

The app records operational metadata about each feed check and notification: when a check last ran, whether it succeeded or failed, a generic error status if it failed, and a record of each notification email attempted (its type, delivery status, and timestamps). These records contain issue counts and delivery status, not full feed contents or unrelated personal data.

Application and hosting infrastructure may also retain technical logs, such as timestamps, shop domain identifiers, and error information, for operational and security purposes.

How information is used

Information described above is used solely to operate Market Feed Guard for the merchant who provided it: running the scheduled and on-demand feed checks the merchant configured, and sending the merchant the alert/recovery notification emails they opted into. It is not used for advertising, and it is not sold or shared with unrelated third parties.

Third-party processors and services

The following third parties process data on our behalf as part of running the app:

• Shopify: the platform the app is built on and authenticates against (OAuth, Admin API).
• Railway: our hosting provider, which runs the application and its database.
• Resend: our transactional email provider, used only to deliver the alert/recovery notification emails a merchant opts into.

The merchant's feed URL itself points to a host the merchant chooses (for example, their own server or a feed-hosting service) — Market Feed Guard makes a read-only HTTPS request to that host to fetch the feed content the merchant already published there.

Data retention

When a merchant uninstalls Market Feed Guard, their session and feed-configuration data are deleted. Notification history is deleted when Shopify sends us a shop-redaction request (see below) rather than immediately on uninstall, since it can take up to that point to serve as an audit trail of notifications actually sent.

Security

Feed URLs are fetched over HTTPS only, with protections in place against the app being used to reach internal or non-public network addresses. OAuth access tokens are stored only as needed to call the Shopify Admin API on the merchant's behalf and are never included in notification emails or logs.

Merchant privacy rights and deletion requests

A merchant can stop notifications at any time from the app's settings, or remove all app access and data by uninstalling Market Feed Guard from their Shopify admin. For a request to review or delete data beyond what uninstalling covers, contact us at support@marketfeedguard.com.

Shopify mandatory compliance webhooks

Market Feed Guard implements Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, and shop/redact). Since the app never stores customer or order data, the first two have nothing to disclose or delete. shop/redact deletes the shop's stored session, feed configuration, and notification history.

Contact

Questions about this Privacy Policy can be sent to support@marketfeedguard.com.