DRAFT — pending legal review and approval. Not yet in force.
Privacy Policy — Change Radar: Catalog Alerts
Last updated: [[EFFECTIVE_DATE]]
1. Who we are
"Change Radar: Catalog Alerts" (the "App") is provided by Dobeo ([[DOBEO_LEGAL_NAME]]). Contact: support@dobeo.com.
2. Summary
- The App reads products and variants only, with the
read_productspermission. It never changes your store. - It does not access orders or customers and does not request Protected Customer Data.
- We do not sell data, do not show ads, and do not use your data to train AI or machine-learning models.
3. Information we store
| Data | Purpose | Retention |
|---|---|---|
| Catalog data: product and variant IDs, titles, handles, status, publication date, vendor, product type, tags, options, SKUs, barcodes, prices, compare-at prices, inventory policy, taxable flag, total inventory, media count. For descriptions and media, only their length or count and a fingerprint. | Detect changes, show the change history, keep the last known data of deleted products | Last state while the App is installed; deleted products for your plan's history period. |
| Change history (old value → new value) | Timeline, alerts, digests and CSV export | Your plan's history period (30 or 365 days), purged daily. |
| Email addresses of the alert recipients you add (your team, not your customers) | Send alerts, digests and test emails | Until you remove them or the App's data is deleted. |
| Alert settings, store domain, time zone, plan and subscription status | Run the alerts you chose and provide your plan | While the App is installed. |
| Shopify access and refresh tokens | Read your catalog | Encrypted (AES-256-GCM); deleted on uninstall. |
| Email log: kind, number of recipients and changes, status. Never the body or the addresses | Daily limits and diagnostics | 90 days. |
The App has no cookies of its own and no analytics or advertising trackers. On the unsubscribe page we keep a salted hash of the IP address for 24 hours, for rate limiting.
4. Sub-processors
- Cloudflare, Inc. (Workers, D1, Queues): hosting and database.
- Resend: delivery of alert, digest and test emails.
Our providers may process data outside your country, including in the United States. [[CONFIRM_TRANSFER_MECHANISM]]
5. Retention and deletion
Change history is kept for your plan's history period and purged daily. Email logs are kept for 90 days and never contain the email body. When you uninstall the App, processing stops and sessions are deleted; 48 hours later, when Shopify sends the shop/redact request, every record of your store is deleted. You can ask for earlier deletion by email.
6. Your rights
You can ask for access, correction, deletion, restriction or portability of your data, and object to processing, by writing to support@dobeo.com. You can also complain to your data-protection authority.
7. Your store's buyers
The App does not process personal data of the people who buy from your store.
8. Emails
Every email says why it was sent, links to this policy and has a one-click unsubscribe link.
9. Changes
We will update the date above and announce material changes in the App or by email.
10. Contact
Email: support@dobeo.com · See also the Terms of Service.