Privacy Policy

Information we process

• Shopify shop domain, installation status, authorization scopes, and session information needed to authenticate the installed shop.
• Merchant-configured monitor names, storefront URLs, device settings, selectors, schedules, and pause state.
• Monitoring results such as timestamps, response status, failed step, error details, checkout progress, and diagnostic screenshots.
• Incident, recovery, and notification-delivery history.
• A merchant-confirmed email address when the merchant chooses to receive operational alerts.
• Limited security and service logs needed to operate and protect the service.

Storeward Relay does not intentionally ingest Shopify customer profiles, orders, payment information, or checkout form contents. Monitoring uses the public storefront purchase path and does not place an order.

How we use information

• Authenticate the merchant and keep data isolated to the installed shop.
• Run storefront checks, classify uncertain and confirmed failures, and display monitoring history.
• Open and resolve incidents and, when enabled by the merchant, send operational notifications.
• Prevent abuse, investigate errors, maintain availability, and comply with legal obligations.

We do not sell merchant or customer personal information and do not use monitoring data for behavioral advertising.

Service providers and international processing

We use service providers only where needed to operate Storeward Relay. These can include Shopify for installation and authentication, Render and Neon for application hosting and storage, Cloudflare for monitoring and related storage, and Resend for transactional notification delivery. Those providers may process data in locations where they or their subprocessors operate.

Retention and deletion

We retain information while a shop uses Storeward Relay and for a limited period when needed for service integrity, security, dispute resolution, or legal compliance. Verified Shopify privacy requests and uninstall events trigger deletion or de-identification workflows for shop-linked application data and disable pending notification delivery. Limited records can be retained where legally required or where they no longer identify the merchant.

Security and merchant choices

We use access controls, authenticated service-to-service requests, tenant isolation, and bounded retry processes designed to prevent unauthorized access and duplicate actions. Merchants can pause or delete monitors, remove an alert address, uninstall the app, or contact us about access, correction, or deletion.

Contact

Email: support@storewardlabs.com

Operator brand: Storeward Labs

Business information that must be disclosed under applicable law will be provided without undue delay in response to a valid request from the individual concerned. Contact support@storewardlabs.com.