Privacy Policy

1. Information we collect

Merchant information

• Store domain name
• Store configuration settings (shipping times, return policies)
• Product metadata used to generate schema
• Subscription status

Automatically collected information

• App usage data
• Error logs
• API request logs

2. What we don't collect

Schema Shield operates entirely on merchant configuration and product data. We do not collect:

• Customer personal information
• Customer purchase or order data
• Payment information — this is handled entirely by Shopify
• Email addresses, other than the merchant contact address

3. How we use information

We use the information we collect to:

• Generate JSON-LD structured data for your products
• Sync your configuration to product metafields
• Process subscription billing through Shopify
• Provide customer support
• Diagnose errors and improve app functionality

4. Data storage

• All data is stored on SOC 2 compliant infrastructure
• Databases are encrypted at rest
• Data is backed up on a regular schedule
• Access is restricted to authorized personnel only

5. Data sharing

We do not sell, trade or rent your information to third parties.

We share data only in these circumstances:

Shopify

As required for the app to function and to process billing.

Service providers

Hosting and analytics providers acting on our instructions.

Legal authorities

Where disclosure is required by law or valid legal process.

6. GDPR & your rights

If you are an EU merchant, you have the following rights over your data:

• Access — obtain a copy of the data we hold about you
• Erasure — request deletion of your data
• Portability — receive your data in a portable format
• Rectification — correct inaccurate data

To exercise any of these rights, email support@schemashieldllc.com.

7. Data retention

Active merchants

Retained for as long as the app is installed.

After uninstall

Deleted within 30 days.

Backups

Retained for 90 days, then permanently removed.

8. Webhooks we process

Schema Shield subscribes to the following Shopify webhooks:

• app/uninstalled — clean up data when the app is removed
• customers/data_request — GDPR data access requests
• customers/redact — GDPR customer data deletion
• shop/redact — GDPR shop data deletion

9. Security

We apply industry-standard safeguards, including:

• HTTPS encryption for all data in transit
• Secure API authentication with Shopify
• Regular security reviews
• Access logging and monitoring

10. Children's privacy

Our service is not directed to individuals under 18, and we do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised "Last updated" date.

Schema Shield also adheres to Shopify's privacy requirements. See the Shopify Privacy Policy.

12. Contact us