Privacy policy

This policy explains how REPLACE_ME Company name ("we") processes personal data when you use Claim Monitor, a Shopify app, and this website. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, for merchants and visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

1. Controller

REPLACE_ME Company name, REPLACE_ME Street 1, REPLACE_ME 8000 Zürich, Switzerland. Contact: support@claimmonitor.app.

2. What the app processes

• Store content. Titles, descriptions, SEO fields and translations of your products, collections and pages. The app reads them through the Shopify Admin API to detect environmental claims. It stores the detected findings (the flagged wording, its surrounding sentence, the resource it belongs to) and your decisions about them.
• Evidence you add. Titles, references, issuers, links, dates and notes of certificates and reports you record in the evidence vault.
• Store identity and access. Your store's myshopify domain and the API access token Shopify issues to the app, used only to read and write the data above and to write one summary metafield per product.
• Technical logs. Request metadata (URL, status, timing, error messages) retained for a short period for operating and securing the service.

The app does not read, store or process your customers' personal data. It requests no customer, order or payment scopes. Shopify's customer data request and redaction webhooks are implemented and answered as "no data held".

3. Purposes and legal basis

Processing is necessary to perform the contract you enter into by installing the app (GDPR Art. 6(1)(b); FADP Art. 31(2)(a)) and, for technical logs and security, our legitimate interest in operating a reliable service (GDPR Art. 6(1)(f)). Data is not used for advertising or profiling and is not sold.

4. Processors and data location

• Cloudflare, Inc. (San Francisco, USA, with EU entities) hosts the application and its database. The database runs in Western Europe. Cloudflare acts as a processor under its Data Processing Addendum, which includes the EU Standard Contractual Clauses.
• Shopify International Ltd. (Dublin, Ireland) provides the platform the app runs inside. Data flows between the app and your store through Shopify's APIs under Shopify's own terms and privacy policy.

5. Retention

Findings, decisions and evidence records are kept while the app is installed. Uninstalling the app, or a shop redaction request from Shopify, deletes all data held for your store within 48 hours. Technical logs are kept for at most 30 days.

6. Your rights

You may request access to, correction or deletion of your data, restriction of processing, data portability, and you may object to processing based on legitimate interest. Write to support@claimmonitor.app. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA, to your local supervisory authority.

7. Cookies

The app inside the Shopify admin uses no cookies of its own; authentication relies on Shopify session tokens. This website sets no tracking cookies.

8. Changes

We will update this policy when the app's processing changes and note the date below.

Last updated 5 September 2026