Privacy Policy

Last updated: 26 July 2026

Gridproof ("the app") is operated by Anis Apps ("we"). This policy describes what data the app processes when a merchant installs it on a Shopify store.

What we access

Gridproof requests only the read_products and write_products Shopify scopes. The app cannot access customer records, orders, payment information, or analytics. We never ask for scopes we do not need.

What we store

• Store identity: your .myshopify.com domain, plan tier, and the offline API token Shopify issues to the app (encrypted at rest by our database provider).
• Job history: the bulk-edit jobs you run — targeted entities, field values before and after each change, verification results, and error details.
• Checkpoint snapshots: point-in-time copies of the product fields a job may change (prices, tags, status, metafields), kept so you can preview and roll back. Retention follows your plan: 24 hours (Free), 30 days (Standard), 90 days (Premium); snapshots are deleted automatically after that window.
• CSV files you upload, for the duration of the job plus the retention window.
• Audit log: per-field change records (entity, field, before, after, timestamp, source).

We store no customer personal data. Product data may incidentally contain merchant-authored text; we treat all of it as confidential.

Where it lives

All data is processed and stored in the European Union:

• Application + database: Railway (EU region, Amsterdam).
• Snapshots/CSV objects: Cloudflare R2 (EU jurisdiction).
• Error monitoring: Sentry (error events may include job/shop identifiers, never product content).

GDPR

• customers/data_request — we hold no customer data; we respond accordingly.
• customers/redact — nothing to erase; acknowledged.
• shop/redact — within the required window after uninstall, all data for the store is erased: jobs, snapshots (including stored files), audit log, billing mirror, sessions, and the store record itself.

You may also request deletion at any time via support.

Sharing

We do not sell, rent, or share store data with third parties beyond the processors listed above. Data is used solely to provide the app's functionality.

Contact

[email protected] · Anis Apps, France.