ShopShield — your shop. protected.
    Pricing
    Log inGet Started

    Privacy Policy

    Last Updated: 10/25/2025

    Welcome to ShopShield.com, operated by ShopShield, LLC ("ShopShield," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, applications, and services (collectively, the "Service").

    By accessing or using the Service, you consent to this Policy and to our Terms of Service.

    1. Information We Collect

    a) Information You Provide

    • Account details: name, email address, and password (stored as a secure hash).
    • Billing data: credit-card or payment details processed by Stripe Inc. (we do not store full card data).
    • Preferences: notification categories, communication settings, and platform selections.
    • Support messages: emails or forms you send to us.

    b) Information Collected Automatically

    • Usage data: pages visited, features used, timestamps, referral URLs.
    • Device data: browser type, operating system, IP address (anonymized or hashed), and user-agent string.
    • Cookies and analytics: small files to remember your session and analyze site traffic (see Section 8).

    c) Information from Integrations

    If you connect or interact with third-party services (e.g., Shopify, Etsy, Amazon), we may receive limited identifiers or public URLs necessary to monitor policy pages. We do not collect credentials for those platforms.

    2. How We Use Your Information

    We process your information to:

    • Provide, maintain, and improve the Service.
    • Detect and report policy or terms-of-service updates from monitored sites.
    • Send email or in-app notifications based on your preferences.
    • Process payments and manage subscriptions.
    • Respond to support requests and technical issues.
    • Comply with legal obligations and enforce our Terms of Service.

    3. Legal Bases for Processing (GDPR)

    We process personal data under one or more of the following bases:

    • Performance of a contract (to deliver subscribed services).
    • Legitimate interests (operational monitoring, analytics, fraud prevention).
    • Consent (marketing communications, cookie placement).
    • Legal obligations (accounting, compliance).

    4. How We Share Information

    We do not sell or rent personal data. We share it only with:

    RecipientPurposeLocation
    Stripe Inc.Payment processingUSA
    Make.com (Celonis SE)Automation of notificationsEU
    Lovable.devApplication hosting and database servicesUSA/EU
    SendGrid (Twilio Inc.)Transactional email deliveryUSA
    Amazon Web Services (AWS)Infrastructure and storageUSA

    All sub-processors are bound by contractual data-protection terms consistent with our Data Processing Agreement.

    We may also disclose information if required by law, to protect our rights, or in a merger or acquisition (with notice before data transfer).

    5. Data Retention

    • Account data is kept while your subscription is active and for up to 90 days after termination.
    • Billing records are retained for the legally required period (typically 7 years).
    • Logs and analytics are stored for up to 180 days in aggregate, then deleted or anonymized.

    You may request deletion at any time (see Section 10).

    6. Security

    We implement technical and organizational safeguards, including:

    • TLS 1.2+ encryption in transit and AES-256 encryption at rest.
    • Role-based access controls and least-privilege principles.
    • Continuous monitoring for anomalies and periodic security reviews.

    No online system is perfectly secure, but we strive to maintain a high standard of protection.

    7. International Data Transfers

    Data may be processed in the United States and other countries where our vendors operate. When transferred from the EEA or UK, we use the EU Standard Contractual Clauses (SCCs) and UK Addendum to ensure adequate protection.

    8. Cookies and Analytics

    We use:

    • Essential cookies – required for login and account management.
    • Functional cookies – remember user preferences.
    • Analytics cookies – anonymized usage metrics via Google Analytics 4 or an equivalent privacy-friendly tool.

    You can adjust or disable cookies through your browser settings. Marketing cookies are not used unless you provide explicit consent.

    9. Marketing Communications

    If you subscribe to newsletters or updates, we will send messages related to platform changes or product improvements. You can opt out at any time via the unsubscribe link or by contacting us at support@shopshield.co.

    10. Your Rights

    Depending on your jurisdiction, you may have rights to:

    • Access and obtain a copy of your personal data.
    • Request correction, deletion, or portability.
    • Object to or restrict processing.
    • Withdraw consent (where applicable).

    To exercise these rights, email support@shopshield.co with "Data Request" in the subject line. We will respond within the timeframe required by law.

    11. Children's Privacy

    Our Service is intended for users aged 18 and older. We do not knowingly collect data from minors. If you believe a child has provided data, contact us to delete it.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the current version. Material changes will be announced via email or a prominent notice on our site.

    13. Contact

    For questions or data requests:

    ShopShield.com

    Email: support@shopshield.co

    Summary

    ShopShield processes minimal personal data to deliver automated alerts about public website-policy updates. We never sell data and use industry-standard encryption, limited retention, and vetted sub-processors to protect your privacy.