Privacy Policy

1. What we collect, and why

In short: Store domain, product price snapshots, sale/operation records, and — only if you send feedback — a message and an optional reply email.

On our marketing site, if you join the launch mailing list we store the email address you submit, and use it only for launch updates. Every email includes a way to unsubscribe.

2. What we do not collect

In short: No data about your customers. No orders, no names, no addresses, no payment details.

• We do not collect or store personal data about your storefront customers — no customer names, emails, addresses, order histories or payment details. The app only reads and writes product prices.
• We do not see your payment card details. All billing runs through Shopify Billing.
• We do not sell or rent any data to anyone, and we do not use your data for advertising.

3. How long we keep it

In short: Price snapshots live for 60 days after a sale ends, then expire. Feedback and session data are erased when your store's data-erasure request arrives.

• Price snapshots: 60 days after the sale they belong to ends. This window exists so that if you uninstall mid-sale, you can reinstall within 60 days and restore your original prices in one click. After 60 days snapshots expire and are deleted.
• Sale and run records are operational records of price changes on your products; they contain no personal data. They are kept while the app is installed to show you your history.
• Feedback and session data are erased when we receive the shop-erasure webhook described below, or earlier on request.

4. GDPR and Shopify's privacy webhooks

In short: We implement all three of Shopify's mandatory privacy webhooks, and because we hold no customer personal data, customer requests are simple to honor.

Shopify sends apps three mandatory privacy webhooks. The Service implements and honors all three:

• customers/data_request — a customer asked for their data. Since we store no customer personal data, the answer we can provide is: there is nothing held about that customer.
• customers/redact — a customer asked to be deleted. Same situation: we hold no customer personal data, so there is nothing to erase, and we record that the request was processed.
• shop/redact — sent after you uninstall the app. We erase stored feedback and session data for your shop. Price snapshots expire on their own 60-day schedule (kept that long as the reinstall safety net), and remaining sale/run records contain no personal data.

If you are in the EU/EEA, UK or another region with data-protection rights (access, correction, deletion, portability, objection), you can exercise them at any time via the contact below — you do not have to wait for a webhook.

5. Where the data lives and who processes it

In short: Your data sits with our hosting provider and passes through Shopify. Nobody else.

The parties that process data for us:

• Shopify — the platform the app runs on; all API traffic to your store goes through Shopify.
• Hosting & database: Vercel (application hosting) and Supabase Postgres (database), under their standard data-processing agreements.
• Email: Resend for sending transactional and launch emails.

We protect data in transit with HTTPS and restrict access to production data to the people who operate the Service.

6. Deletion requests and contact

In short: Email support@ and we delete your data — you don't need to cite a law to ask.

To request deletion of your shop’s data, a copy of what we hold, or anything else about privacy, email support@saleguard.app. Deletion requests are honored regardless of where your business is located.

The data controller is NGUYEN THI THU TRANG, Tân Lập, Bến Cầu, Tây Ninh, Vietnam.

7. Changes to this policy

In short: If what we collect ever changes, this page changes first and we tell you.

If we change what data we collect or how we use it, we will update this page and, for material changes, notify you inside the app or by email before the change takes effect. The “Last updated” date at the top reflects the current version.