Privacy policy
Garanti EU Guarantee Notice — last updated 22 August 2026.
What this app does
The app displays the harmonised EU legal guarantee notice on a merchant's product pages and in their order confirmation email, and can display the GARAN durability label and an AI content disclosure. It does not process orders, payments or customer accounts.
Data we store
We store only what is needed to run the app for a shop:
- Shop session — the myshopify.com domain and the access token Shopify issues when the app is installed. Without it the app cannot talk to Shopify on the shop's behalf.
- Plan tier and feature flags — stored on the shop as app-owned metafields.
- Compliance assessment answers — the four answers a merchant gives in the app, and the result, stored on the shop as an app-owned metafield.
Data we do not store
No customer personal data. The app never reads, receives or stores names, addresses, email addresses, order contents or payment details of a merchant's customers. It requests only two Shopify access scopes:
read_products— to read product data for per-product durability labels.write_app_proxy— to serve the public compliance page under the shop's own domain.
Neither grants access to customers or orders. The app also asks for no theme access, so it cannot read or modify a merchant's theme files.
Tracking
The app sets no cookies on a merchant's storefront, loads no analytics or advertising scripts, and ships no JavaScript to the storefront at all. Visitors to a shop are not tracked by this app in any way.
Where data is held
Session data is held in a Postgres database operated by Railway. Metafields are held by Shopify, on the merchant's own shop.
How long we keep it
Session data is deleted when the app is uninstalled, and again when Shopify sends the shop/redact request 48 hours after uninstall. App-owned metafields are removed by Shopify when the app is uninstalled.
GDPR requests
The app implements Shopify's mandatory compliance webhooks. Because it holds no customer data, a customers/data_request returns nothing to disclose and a customers/redact has nothing to erase; both are acknowledged rather than ignored. shop/redact deletes the shop's session data.
Third parties
No merchant or customer data is sold, rented or shared with third parties. The app makes no outbound requests to any service other than Shopify.
Contact
Questions or requests: hoangvhuan@gmail.com