Privacy Policy

Overview

GMC Feed Preflight is a read-only Shopify app operated by Pure Insight. The app helps merchants identify product data issues that may affect Google Merchant Center feed readiness before products are submitted through a feed or channel.

The app does not modify Shopify products, orders, customers, themes, checkout, or Google Merchant Center accounts.

Data We Process

When a merchant installs the app, we process the shop domain, shop name, shop currency, installation timestamps, granted OAuth scopes, and encrypted Shopify access tokens needed to operate the app.

When a merchant starts a scan, we read product catalog data needed for feed readiness checks, including product titles, handles, vendors, product types, tags, images, options, variants, SKUs, barcodes, prices, inventory signals, weights, and selected product or variant metafields used for merchant-configured attribute mappings.

We store scan jobs, issue results, issue workflow status, optional merchant notes on issues, billing state, and CSV export metadata. CSV exports are stored so merchants can download operational issue lists.

Customer Personal Data

The app is designed for product catalog analysis and does not request customer, order, or checkout access scopes. We do not intentionally collect customer personal data.

If a merchant enters personal data into product fields that the app scans, that data may be processed as part of the product catalog content supplied by the merchant.

How We Use Data

We use merchant and product catalog data to authenticate stores, run feed readiness checks, display prioritized issue lists, manage app subscriptions through Shopify App Pricing, support CSV exports, and provide support or troubleshooting when requested by the merchant.

We do not sell merchant data or use merchant catalog data for advertising.

Service Providers

The app is hosted on Cloudflare Workers and uses Cloudflare D1, Queues, and R2 for application data, background scans, and CSV exports. Shopify provides OAuth, embedded app authentication, Admin API access, webhooks, and App Pricing services.

These providers process data only as needed to deliver the app infrastructure and Shopify platform functionality.

Retention and Deletion

We retain shop records, scan results, settings, issue workflow data, and exports while the app remains installed or as needed to provide the service.

When Shopify sends the shop/redact privacy webhook, we delete stored shop records and associated CSV export files for that shop. Customer privacy webhook requests are acknowledged; the app does not store customer records by design.

Merchants may contact support to request assistance with data access or deletion.

Security

Shopify access tokens are encrypted before storage. All app traffic is served over HTTPS. The app uses read-only Shopify scopes and validates Shopify OAuth, session token, and webhook signatures.

Contact

For privacy questions or requests, contact support@pureinsight.co.