Privacy and data retention
What we process for free scans and the Shopify app, and how long we keep it.
Updated: 19 October 2026. We are an independent project. Privacy questions and requests: radoone@gmail.com.
Information we process
- Free scan request: store domain, your email, language, request status and report. Your email confirms the request and receives the report.
- Public catalog scan: public product titles, descriptions, brands, categories, images and URLs. We may also collect the business email on public contact pages. Product text becomes search vectors for comparison with Safety Gate alerts.
- Installed Shopify app: shop domain, product snapshots and images, check results, possible matches, review decisions, settings, notification preferences and required app session data.
- Technical records: security and service logs for operation, troubleshooting and protection.
Why and how we use it
We verify and run scans, compare public products with European Commission Safety Gate alerts and send reports. For installed stores, we run ongoing checks and keep review history. We also prevent abuse and maintain reliable service.
We may store public business emails and scan summaries in an internal lead list to assess and manage potential app customers. This email is not needed to send your report. Possible matches support human review, not legal or product-safety determinations.
Retention and deletion
- Free scan request and report record: scheduled for deletion 30 days after the request.
- Rate-limit and daily usage records: scheduled for deletion after 2 days.
- Public scan catalog snapshot and search vectors: scheduled for deletion 90 days after saving or refreshing each record. Later scans restart the timer for reused records.
- Shopify safety-check history: kept for 90 days. Alerts, decisions and audit history remain while the app is installed. After uninstall, Shopify's shop/redact request triggers deletion of app data and stored sessions.
- Service logs and email-provider records: retained according to the retention settings and policies of Google Cloud and Brevo.
Cloud database expiration policies handle deletion. Google Cloud may remove expired records after the stated deadline.
Service providers and data sources
Shopify runs the embedded app. Google Cloud and Firebase provide hosting, storage, background jobs and Vertex AI product comparison. Brevo sends confirmation, report and notification emails. Cloudflare Turnstile protects the free-scan form from automated abuse.
Alerts come from the European Commission's public Safety Gate system. Providers process information as needed to deliver these services.
Your choices and requests
Email radoone@gmail.com to request access, correction or deletion of your scan or store data, or to object to processing.
After uninstall, Shopify sends a shop/redact request to delete the store's app data. We acknowledge Shopify customer-data requests; we do not store customer accounts or orders.
Contact
ZeroRecall privacy contact: radoone@gmail.com.