Privacy Policy

1. Who we are

Shopify Scraper (shopify-scraper.com) is operated by Shopify Scraper. We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at shopify.scraper.com@gmail.com or through the contact page.

2. Data we collect

• Account data: first name, last name, email address, and your password (stored only as a secure hash, never in clear text).
• Billing data: subscriptions and payments are processed by Stripe. We store your Stripe customer and subscription identifiers and invoice links. We never see or store your card number.
• Usage and security logs: when you sign in, use the scraper, or manage stock tracking, we record the action, the store URL involved, your IP address, and a timestamp.
• API credentials: if you use the Developer API, we store your API key as a hash together with its creation date.
• Tracking configuration: the stores and products you choose to monitor with Price & Stock Tracking.
• Newsletter and marketing preferences: your email address if you subscribe to the newsletter, and your marketing consent choice collected at registration or unsubscription.
• Cookies and analytics: with your consent, audience measurement data via Google Analytics / Google Tag Manager (see section 7).

3. Why we use it (legal bases)

• To provide the service (contract): account management, exports, API access, stock tracking alerts, billing.
• To secure the service (legitimate interest): sign-in and activity logs, abuse and fraud prevention, rate limiting.
• To keep you informed: product and feature announcements are sent to customers under legitimate interest, with an unsubscribe link in every email; the newsletter and promotional messages rely on your consent, which you can withdraw at any time.
• To measure our audience (consent): analytics cookies are only set after you accept them.

4. How long we keep it

• Account data: for as long as your account exists, then deleted when you delete your account.
• Usage and security logs: up to 12 months, then deleted.
• Billing records: kept for the duration required by accounting and tax law.
• Marketing suppression list: the email addresses of people who unsubscribed are kept indefinitely, for the sole purpose of never emailing them again.

5. Who we share it with

We never sell your personal data. It is shared only with the processors required to run the service:

• Stripe (payments and subscriptions)
• Google (email delivery; and analytics / tag management, subject to your cookie consent)
• Infomaniak (infrastructure hosting)

Some of these providers process data outside the European Union. Where that is the case, transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.

6. Your rights

Under the GDPR you can, at any time:

• access the personal data we hold about you;
• correct it if it is inaccurate;
• delete it (delete your account from your profile, or ask us);
• receive a copy in a portable format;
• object to processing based on legitimate interest;
• withdraw any consent you have given, without affecting past processing.

To exercise these rights, email shopify.scraper.com@gmail.com. We answer within one month. You also have the right to lodge a complaint with your data protection supervisory authority.

7. Cookies

Strictly necessary cookies (session, security) are always active. Audience measurement cookies (Google Analytics via Google Tag Manager) are only set after you accept them in the cookie banner. You can change your choice at any time through the "Cookies" link in the footer.

8. Security

Data is transmitted over HTTPS, passwords and API keys are stored hashed, and payments are handled entirely by Stripe. For more detail, see our Security page.

9. Changes to this policy

If we materially change this policy, we will update the date at the top of this page and, when the change affects your rights, notify you by email or through the service.