Privacy Policy

Effective date: September 26, 2026

What Revenue Guardian processes

Revenue Guardian processes the minimum Shopify store data needed to monitor store health: the store domain, hashed order identifiers, order timestamps, gross paid totals, currency, payment method names, synthetic journey results, monitoring settings, and incident history. It does not request customer names, addresses, email addresses, phone numbers, card data, or payment credentials.

How data is used

Data is used to establish revenue baselines, identify unusual changes, monitor storefront journeys, display operational history, and provide investigation guidance. Revenue Guardian does not sell personal information or use merchant data for advertising.

Service providers

Shopify supplies authorized store data and app billing. Hosting and monitoring providers process encrypted operational data to run the service. If optional AI explanations are enabled, only minimized incident evidence is sent to the disclosed AI provider; order records, access tokens, raw storefront content, and store identifiers are excluded.

Retention and deletion

Order-derived records and deletion tombstones are normally retained for 35 days; resolved incidents and journey runs for 30 days; completed jobs and webhook receipts for 7 days; and audit records for 90 days. Uninstalling the app disables access. Shopify privacy requests are verified and processed, and deleted information is prevented from returning during reconciliation or restoration.

Security

Access tokens are encrypted at rest. Requests and webhooks are cryptographically verified, data is separated by store, and the app uses read-only Shopify order access. No feature can edit themes, products, payments, orders, or customer records.

Contact

For privacy requests, contact support@salevigil.com. Shopify merchants may also submit privacy requests through Shopify.