ShopXray - Privacy Policy
Last Updated: March 2026
Introduction
At ShopXray (referred to as "ShopXray", "we", "us", or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website, platform, and services at shopxray.app.
Scope of this Policy
This policy applies to all services provided by ShopXray, including our Shopify store analyzer, live sales and inventory tracking, store discovery, product catalog export, and all related features. Third-party services integrated with our platform (such as payment processors and authentication providers) have their own privacy policies.
Information We Collect
We collect information in the following ways:
- Direct Collection: Information you provide directly to us, such as your name, email address, and password when you create an account. This also includes the Shopify store URLs you submit for analysis and tracking.
- Automatic Collection: Device information, IP address, browser type, usage data (such as pages visited, features used, and interaction patterns), and technical logs to ensure the security and performance of our platform.
- Third-Party Sources: Additional data from authentication providers (such as Google) or payment processors (such as Lemon Squeezy), primarily for authentication and billing purposes.
- Google User Data: When you sign in to ShopXray using your Google account, we collect your Google email address and Google profile name. We do not collect any other Google user data (such as contacts, calendar, Google Drive data, or any other Google Workspace data) beyond what is strictly necessary for authentication and basic profile display.
- Analytics Data: We use Google Tag Manager and related analytics tools to understand how visitors interact with our website, measure marketing performance, and improve user experience.
How We Use Your Information
Your information, including Google user data, is used solely to provide and improve our core application functionality:
- To provide our Shopify store analysis, product catalog export, sales tracking, inventory monitoring, restock detection, and store discovery services.
- To create and manage your user account, login sessions, and subscription plans.
- To process billing and subscription management through our payment processor (Lemon Squeezy).
- To communicate essential service-related updates, account notifications, and customer support.
- To ensure the security, integrity, and legal compliance of our services.
- To analyze platform usage in aggregate to improve performance and develop new features.
Use of Google User Data: We use your Google email address to create and manage your ShopXray account, for login purposes, and to send you essential service-related communications (such as account notifications). We use your Google profile name to personalize your user experience within the application (e.g., displaying your name in your profile and dashboard).
Public Shopify Store Data
ShopXray's core service involves analyzing publicly available Shopify store data. This data includes:
- Publicly accessible product catalogs, pricing, inventory availability, themes, installed apps, collections, best sellers, social media links, and store metadata available through public Shopify APIs and storefront pages.
- Inventory changes, sales events, and restock events inferred from publicly observable inventory level changes over time.
This information is publicly available on the internet and does not constitute personal data of store owners. ShopXray does not access any private Shopify admin data, customer records, or any information that requires store owner authorization.
Information Sharing
We share your data only under the following limited circumstances:
- With your explicit consent.
- With trusted third-party service providers who perform functions on our behalf to support our services (e.g., cloud hosting, database management, payment processing, and authentication). These providers are contractually bound to protect your data and are prohibited from using it for any other purpose.
- To comply with legal obligations, enforce our terms of service, or protect the rights, property, or safety of ShopXray, our users, or the public.
Sharing of Google User Data: We do not share, transfer, or disclose your Google user data with any third parties except as strictly necessary to provide the core functionality of ShopXray (e.g., for secure account management with our backend service provider) or when legally required.
Prohibited Data Uses and Transfers
We strictly limit the use and transfer of all personal data, including Google user data, to providing or improving the user-facing features of ShopXray.
We DO NOT sell your personal data to third parties. This is a fundamental principle of our service.
Third-Party Services
ShopXray integrates with the following third-party services to provide our platform:
- Google OAuth: For secure authentication and account sign-in. Google's privacy policy can be found at policies.google.com/privacy.
- Supabase: For authentication services and session management.
- Lemon Squeezy: For payment processing and subscription management. Lemon Squeezy's privacy policy can be found at lemonsqueezy.com/privacy.
- Google Analytics / Tag Manager: For website analytics and measuring marketing effectiveness.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies for the following purposes:
- Essential Cookies: Required for authentication, session management, and core platform functionality.
- Analytics Cookies: Used through Google Tag Manager to understand user behavior, measure marketing performance, and improve the user experience.
Data Protection
We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), secure password hashing, and access controls. In the event of a data breach, we will notify affected users promptly in accordance with applicable laws.
Data Retention and Deletion
We retain your personal data, including Google user data, only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to provide our services to you, and to comply with our legal and regulatory obligations.
Tracked store data (sales events, inventory snapshots, restock events) is retained based on your subscription plan:
- Free plan: 7 days of sales history
- Starter plan: 30 days of sales history
- Growth plan: 30 days of sales history
- Enterprise plan: 90 days of sales history
Account Deletion: When you delete your account, all associated personal data — including tracked store data, analysis history, and account information — is permanently deleted from our systems. This action is irreversible. You may request your data to be deleted by contacting us at the email address below.
Your Rights
You have rights regarding your personal data, including:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data and account.
- Objection: Object to the processing of your personal data where applicable.
- Data Portability: Request your data in a structured, commonly used format.
Depending on your location, you may also have rights under laws such as the GDPR (EU/UK/Switzerland) or CCPA (California). To exercise any of these rights, please contact us at the email address below.
Changes to this Policy
We may update this policy occasionally to reflect changes in our practices or applicable laws. Updates will be posted on this page with an updated effective date. Continued use of our services after changes implies your acceptance of the revised policy.
Contact Us
For questions about this Privacy Policy or to exercise your rights, please contact us at [email protected].
Shopify is a trademark of Shopify Inc. ShopXray is not affiliated with or endorsed by Shopify Inc. Google is a trademark of Google LLC.