Privacy policy
Last updated: October 19, 2026
Store Health ("the App") is provided by Swift Labs ("we", "us"). This policy explains what the App collects when a merchant installs it on a Shopify store, how we use it, and how to have it deleted.
Information we collect
- Store information from Shopify: your shop's myshopify domain, store name, primary domain, store contact email, and whether it is a development store.
- Product and collection data (read-only,
read_productsscope): product and collection titles, handles, descriptions (first 20 characters, only to check that one exists), SEO title and description, and image alt text. We do not change your catalog. - Public storefront pages: the App fetches pages of your online store the same way a visitor or search engine would, records the links and images on them, their HTTP status, page titles, meta descriptions, headings, and response times.
- Settings you enter: an alert email address and, optionally, your storefront password (stored encrypted with AES-256-GCM and used only to view your own storefront during scans).
- Access tokens: the Shopify API access and refresh tokens issued when you install, stored encrypted.
- Billing status: which plan you are on and the Shopify subscription ID. Payments are handled entirely by Shopify; we never see card details.
We do not collect, store or process any personal information about your customers. The App does not request access to customers, orders, or checkouts.
How we use it
Only to run scans, show you results, send the email reports and alerts you enable, provide support, and manage your subscription. We do not sell data or use it for advertising.
Sharing
We use these sub-processors: Cloudflare (hosting and database, United States/global edge), Resend (sending alert emails), and Shopify (authentication and billing). We share data with them only as needed to run the App.
Retention and deletion
- When you uninstall, we immediately delete your access tokens, stop all scans, and stop emails.
- 48 hours after uninstall, Shopify sends us a
shop/redactrequest and we permanently delete all remaining data for your store, including scan history and settings. - Because we hold no customer data,
customers/data_requestandcustomers/redactrequests have nothing to return or delete; we log the request and confirm it. - You can ask us to delete your data at any time by emailing support@deadlinkpatrol.com.
Security
All traffic uses HTTPS. Tokens and storefront passwords are encrypted at rest. Every request from Shopify is verified (session token signature, HMAC on webhooks and OAuth).
Your rights
Depending on where you live (for example under the GDPR or CCPA) you may have rights to access, correct, or delete your data, or object to processing. Email support@deadlinkpatrol.com and we will respond within 30 days.
Changes
If we change this policy we will update the date above and, for material changes, notify you by email.
Contact
Swift Labs · support@deadlinkpatrol.com