Privacy policy

What we store

When you install StoreVault, we store copies of the store data you ask us to back up: products, collections, pages, blogs and articles, navigation, redirects, inventory levels, themes, and - because a store archive without them is not an archive - your orders and customers. Copies are point-in-time versions of your own data, stored so that you can look at what changed and put back what was lost.

Why we store it

To provide the backup, comparison, export and restore features you installed the app for. For nothing else. We do not analyse your data, do not aggregate it with other merchants' data, do not train models on it, do not sell it and do not share it with anyone.

How long

Version history is kept for the window of your plan (7, 30, 90 or 365 days). At least one copy of each record is kept while the app is installed, so nothing disappears from your backup entirely. If you uninstall, everything is erased 25 days later. If you want it gone sooner, ask from inside the app and confirm by the link we email to your store contact address: we destroy your encryption key immediately, which makes every stored copy unreadable at once, and remove the data.

One honest detail about our own disaster recovery. Encrypted key-escrow copies exist so that a dead server does not make every customer's backup unreadable; they expire within 7 days, they cannot be decrypted on our servers, and keys of erased stores are excluded from any restore we perform.

How it is protected

Everything is encrypted in transit and at rest. Each store has its own encryption key; that key is stored wrapped by a master key that lives only in the running service's environment. Every read of protected data is logged. Nobody browses your data: there is no console that shows it.

This website

The public pages of this site count page views with Cloudflare Web Analytics. It sets no cookies, collects no identifiers and does not follow you between sites. The app itself - everything behind your Shopify admin - carries no analytics at all: what you do with your own backup is not something we measure.

Your customers' rights

If a customer asks you to delete their data, Shopify sends us the request and we remove that person from your stored backups, not just from the live store. If a customer asks for a copy of their data, we produce it for you within the period Shopify requires.