Privacy policy

Information processed

The app processes your Shopify store domain and identity, installation and subscription status, authorized Shopify sessions, and product/variant information needed to scan SKUs and barcodes, review identifier changes, and print labels. Shopify authorization may include staff names and email addresses in session data; sensitive session fields are encrypted.

We retain a compact operational index: product/variant IDs, identifier hashes and masked hints, findings, coverage, rules, exceptions, job status and preferences. Full catalogue records are not retained as a database copy. Current identifier values are read from Shopify when needed; original and proposed values for bulk changes are held in encrypted, expiring manifests.

If you confirm an alert destination, we store that email address encrypted for notifications. Staff sign-in email addresses are not automatically used as alert destinations. Support messages contain the information you choose to provide; please do not send access tokens or sensitive catalogue exports.

Purposes and billing

Information is used to provide identifier checks, alerts, previewed repairs, conditional undo, label printing, entitlement enforcement, security and support. Operational logs contain limited IDs, counts, timings and sanitized errors, not access tokens, full identifiers or manifest contents.

Shopify hosts subscription billing. The app verifies subscription status and plan limits; it does not collect payment-card details. The app does not ingest customer or order records and has no storefront tracking or advertising features.

Service providers and processing

Shopify provides the platform, authorization and billing. Google Cloud provides application hosting, background jobs, encrypted manifest storage and infrastructure logs. Neon provides the PostgreSQL operational database. Confirmed notification addresses and limited issue information may be sent to the configured email-delivery provider when notifications are enabled.

Google Cloud application hosting and manifest storage are configured in the United States. Providers may process information outside your country. Contact us for current provider, region and transfer information. This public page loads its font from the Shopify content-delivery network.

Retention and deletion

Operational data is kept while needed for the installation and its selected plan. History retention is 7 days on Free, 30 on Starter, 90 on Growth and 365 on Scale. Expiring manifests are removed by background cleanup. A separate 400-day storage lifecycle is a fallback for orphaned objects, not the normal retention period. Cleanup depends on successful background processing; uninstall starts deletion earlier.

Uninstalling disables jobs and notifications, revokes stored sessions and begins asynchronous deletion of installation data and manifests. Shopify privacy webhooks also trigger the relevant deletion process. Minimal hashed deletion evidence is retained for up to one year; opaque manifest-erasure fences are retained for 30 days to catch late uploads. Provider backup and infrastructure-log retention can differ from live operational storage. Contact us for deletion status or backup-retention information.

Your requests and contact

You can review app settings, remove the confirmed notification address or uninstall the app. To request access, correction, deletion or restriction of personal information, or ask about privacy and support, contact contact@thaviq.com. We may need to verify your relationship to the store before fulfilling a request.

Changes to this policy will be reflected on this page with an updated date.