FeedGuard Privacy Policy

Last updated: July 2026

FeedGuard ("the app") helps Shopify merchants automate product and inventory feeds. This policy describes what we store and why.

What we collect

• Store information: your myshopify domain, plan, and the OAuth access token Shopify issues so the app can read and update your products on your behalf.
• Feed configuration: the sources you connect (URLs, FTP/SFTP hosts, spreadsheet IDs) and their credentials. Credentials are encrypted at rest with AES-256-GCM and are never displayed back in the interface.
• Feed files and run history: snapshots of the supplier files you sync and per-run change logs (SKU, field, before/after values) — kept so runs can be audited and reverted.

What we do not collect

FeedGuard does not request, access, or store your customers' personal data — no names, addresses, orders, or payment details. The app's only Shopify permission is product read/write (write_products).

How data is used

Exclusively to run the service: fetching your supplier feeds, computing diffs, applying the changes you approve, and sending the alerts you configure. Data is never sold or shared with third parties, except the processors below.

Processors

• Shopify (platform APIs)
• Resend (alert email delivery, when you configure email alerts)
• Crisp (in-app support chat, when enabled)

Data retention & deletion

• Uninstalling the app revokes its access immediately and pauses all feeds.
• Shopify's mandatory shop/redact request (sent 48 hours after uninstall) permanently deletes the store's data — feeds, credentials, run history, and change logs.
• Because no customer personal data is stored, customers/data_request and customers/redact requests are acknowledged with nothing to return or erase.

Security

All traffic is TLS-encrypted. Supplier credentials are encrypted at rest. Access to production infrastructure is limited to the operator of the service.

Contact

Questions or data requests: support@synovaapps.com.