Privacy policy

What this app does

NorthStack audits a Shopify store for problems that can lead to a Google Merchant Center suspension, and drafts replacement policy and Contact page content for the merchant to review and publish.

What we access

When you install the app, Shopify grants it permission to read and write:

• Products — titles, descriptions, prices, compare-at prices, images, tags, barcodes.
• Legal policies — refund, shipping, privacy, terms and contact information text.
• Online store pages — page titles, handles and body content.

We also request your storefront's public homepage over the internet, the same way any visitor would, to check whether a storefront password is on.

We do not request access to customer data, orders, payments or financial information.

What we store

• Your store's domain and the access token Shopify issues, so the app can run.
• Each audit report: the findings, the score and the quoted evidence behind them. This can include text from your policies, pages and product descriptions.

Audit reports are kept so you can compare runs over time.

What we send to third parties

AI review and drafting. When you run an audit with the AI review, or ask the app to draft a policy or Contact page, the app sends the relevant text from your store — policies, page content, product titles and descriptions, and your store domain — to Anthropic's API, which returns the review or draft. See Anthropic's privacy policy.

No other third party receives your store's data. We do not sell data, and we do not use your store's content to train models.

Retention and deletion

• When you uninstall the app, we delete your access session and every audit report stored for your store.
• 48 hours after uninstall, Shopify sends a shop data erasure request. We delete anything remaining for your store when it arrives.
• We hold no customer data, so customer data requests and customer redaction requests return nothing to erase. We acknowledge both.
• You can request deletion at any time by emailing privacy@northstack.us.com. We complete requests within 30 days.