# Privacy Policy > How Conversion Guard, a Shopify app operated by Conversion Guard LLC, collects, uses, retains, and deletes merchant data. Markdown mirror of . **Last updated:** August 14, 2026 ## 1. Who We Are Conversion Guard ("we," "us," "our") is a Shopify app that audits online stores for conversion and performance issues. The app is operated by **Conversion Guard LLC**, registered at **2525 W. Grand Ronde Ave, Kennewick, WA**. If you have any questions about this policy, contact us at [privacy@conversionguard.ai](mailto:privacy@conversionguard.ai). ## 2. What Data We Collect ### From Shopify (when you install the app) - **Shop domain**: your Shopify store's domain (e.g. `yourstore.myshopify.com`) - **Shopify access token**: the credential Shopify issues so the app can apply the fixes you order to your store. This token is encrypted at rest using AWS KMS and is never exposed outside our systems. - **Store content**: during an audit, the app browses your public storefront the way a visitor would; it does not read your theme code or admin-only content. Fixes you order are applied through Shopify's Admin API, limited to the scopes you grant at install: `write_products`, `write_content`, `write_online_store_pages`, `write_files` (image alt text), and `write_analytics_annotations` (audit markers in your analytics reports). ### From Google (only if you connect Google Analytics or Search Console) Connecting Google is entirely optional. The app works without it, and nothing below is collected unless you complete the Google consent screen in the app's Settings. - **Google OAuth refresh token**: the credential Google issues so the app can read your reports. It is encrypted at rest using AWS KMS. Short-lived access tokens are minted per use and never stored. - **Granted scopes**: a record of which of the two permissions you approved, so the app only calls the APIs you actually allowed. - **Selected property**: the GA4 property ID and Search Console site URL you pick, plus their display names, so we query the right one. - **Google Analytics report data** (requested under `analytics.readonly`): aggregated GA4 report rows for the last 28 or 90 days: sessions, users, orders, revenue, conversion rate, the ecommerce event funnel (view_item, add_to_cart, begin_checkout, purchase), top landing page paths, device split, and channel mix. - **Search Console data** (requested under `webmasters.readonly`): aggregated search performance for your verified site: clicks, impressions, CTR, average position, top queries, top pages, device split, sitemap status, and Google index status for your top pages. Both permissions are **read-only**. The app cannot and does not create, edit, or delete anything in your Google account. We request only aggregated report data, never user-level or per-visitor records, and we do not request any narrower-scoped alternative because Google does not offer one for reading GA4 or Search Console reports. ### From GitHub (only if you connect a theme repository) Connecting GitHub is entirely optional and applies only to plans that include theme pull-request fixes. Nothing below is collected unless you install our GitHub App on a repository you choose. - **GitHub App installation**: the installation ID, the repository you select, and its base branch, stored on your shop record so fix orders know where to open pull requests. - **Repository contents**: when you order a theme code fix, the app reads your connected repository to draft the change and opens a pull request on a dedicated `conversion-guard/fix-...` branch. Access uses short-lived installation tokens (about one hour) minted per order and never stored. Nothing is changed on your store or repository without your review: you approve and merge every pull request yourself on GitHub. ### Generated During Audits - **Screenshots**: images of your storefront pages captured during an audit. Screenshots are stored in AWS S3 and served via a CloudFront CDN for use in your audit report. - **Audit findings**: structured records describing issues found across SEO, AI search visibility, CRO, UX, app stack, and theme code categories. Stored in AWS DynamoDB. - **Audit reports**: an HTML report and a JSON findings file generated at the end of each audit. Stored in AWS S3 and accessible only to you via an authenticated link. - **Audit progress events**: a timeline of events recorded as the audit runs (e.g. "SEO check started," "CRO check complete"). Stored in AWS DynamoDB. ### Billing Records - **Transaction records**: records of Shopify charges associated with your account (charge IDs, amounts, status). We do not store card numbers or payment details; all payment processing is handled by Shopify. ### What We Do Not Collect - **No customer PII.** The app does not collect, store, or process any personal information belonging to your store's customers. Audit checks analyze page content and structure, not individual shopper sessions. This holds for the Google integrations too: we request only aggregated report totals, never user-level, cookie-level, or per-visitor data. - **No passwords or admin credentials** beyond the Shopify access token granted through Shopify's standard OAuth flow. ## 3. How We Use Your Data | Data | Purpose | |---|---| | Shop domain + access token | Authenticate requests and apply the fixes you order (product, collection, page, blog, and image-alt updates; analytics annotations) | | Store content (public storefront pages) | Run audit checks; sent to our AI analysis service (see section 4) | | Screenshots | Display in your audit report | | Audit findings and reports | Show you the results of each audit and enable the fix flow | | Google OAuth token + selected property | Fetch your Analytics and Search Console reports at audit time; nothing else | | Google Analytics report data | Build the analytics section of your audit report and ground findings in your real traffic, funnel, and conversion numbers | | Search Console report data | Build the search performance section of your audit report and prioritize SEO findings by the queries and pages that actually drive your clicks | | GitHub installation + repository | Open the theme-fix pull requests you order; repository files are read only during that fix session | | Transaction records | Track billing status; required by Shopify's partner program | We do not use your data for advertising, and we do not sell or rent your data to third parties. ## 4. Third-Party Services ### Anthropic (AI Analysis) The audit process sends store content, including page text, rendered markup, and storefront structure as any visitor's browser would see them, to **Anthropic** for AI-powered analysis using the Claude model. This is the core mechanism by which the app identifies issues and generates recommendations. If you order a theme code fix through a connected GitHub repository, the relevant repository files are likewise processed through Anthropic's API to draft the pull request. If you have connected Google, the aggregated Analytics and Search Console report figures described in section 2 are included in the audit request sent to Anthropic, so the AI analysis can reason about your real numbers. Only the aggregated figures are sent. Your Google credentials never leave our backend and are never exposed to the AI or its browsing sandbox. Anthropic does not use data submitted through its API to train its models. Data sent to Anthropic is governed by Anthropic's privacy policy and terms of service. We recommend reviewing [Anthropic's privacy policy](https://www.anthropic.com/privacy) for details on how they handle data submitted through their API. ### Amazon Web Services (AWS) All application infrastructure runs on AWS, including: - **DynamoDB**: stores shop records, audit findings, audit events, and transaction records - **S3**: stores screenshots and audit report files - **Lambda**: runs application logic - **KMS**: encrypts Shopify access tokens at rest - **CloudFront**: serves audit screenshots for report display - **EventBridge**: routes internal events between services AWS infrastructure is located in the **us-east-2** region. Data does not leave this region except when sent to Anthropic's API for analysis, or when our backend calls Google's APIs to fetch the reports you authorized. ### Google (Analytics and Search Console) If you choose to connect Google, our backend calls the Google Analytics Data API, the Google Analytics Admin API, and the Google Search Console API on your behalf, using only these two read-only permissions: - `https://www.googleapis.com/auth/analytics.readonly`: view your Google Analytics data - `https://www.googleapis.com/auth/webmasters.readonly`: view Search Console data for your verified sites **Limited Use disclosure.** Conversion Guard's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Specifically: - We use Google data only to provide and improve the user-facing audit features described in this policy. - We do not transfer Google data to others except as needed to provide those features (our AI analysis provider and cloud infrastructure, both described above), to comply with applicable law, or as part of a merger or acquisition with notice to you. - We do not use Google data for advertising of any kind, and we never sell it. - We do not use Google data to develop, improve, or train generalized AI or machine learning models. It is used only to generate your own audit. - No humans read your Google data, except where you explicitly ask us to (for example a support request), where required for security or to comply with applicable law, or where the data has been aggregated and anonymized. ### GitHub (theme pull requests) If you connect a repository, our backend calls the GitHub API on your behalf to list your repositories and branches and to open the pull requests you order. Fix sessions read your repository through GitHub's official API using short-lived installation tokens. You can revoke access at any time by disconnecting in the app's Settings or by uninstalling the GitHub App from your repository on github.com. ### Shopify As a Shopify app, we operate within Shopify's platform. Shopify's own privacy policy governs the data they hold about you as a merchant. ## 5. Data Sharing We do not sell, trade, or rent your data. Data is shared only with the third-party services listed in section 4 above, and only to the extent necessary to operate the app. We may disclose data if required by law, court order, or to protect the rights and safety of users and third parties. ## 6. Data Retention and Deletion ### While the app is installed We retain your shop data, audit records, and screenshots for as long as you have the app installed. Audit findings and reports remain accessible to you through the app. ### When you uninstall When you uninstall Conversion Guard, Shopify sends us an `app/uninstalled` webhook. We stop processing your data at that point. Shopify's partner program requires that all merchant data be deleted within 48 hours of receiving a `shop/redact` webhook (sent by Shopify after a grace period following uninstall). When that webhook is received, we delete all records associated with your shop domain from our systems, including DynamoDB records and S3 files. ### Screenshots and reports Screenshots and report files stored in S3 are deleted as part of the shop redact process described above. ### Disconnecting Google You can disconnect Google at any time from the app's Settings. When you do, we revoke the refresh token with Google immediately and delete our copy of it along with your selected property. You can also revoke the app's access directly at [your Google Account permissions page](https://myaccount.google.com/permissions). Analytics and Search Console figures are fetched fresh for each audit and are not kept as a standing copy of your Google data. Figures that were already written into a past audit report remain in that report until the report is deleted, so that your audit history stays readable. The same revoke-then-delete happens automatically when you uninstall the app and we receive Shopify's `shop/redact` webhook. ### Disconnecting GitHub You can disconnect GitHub at any time from the app's Settings, which removes our record of your installation and repository. You can also uninstall the GitHub App directly on github.com. Installation tokens are short-lived and never persisted, and the stored connection details are deleted with your shop record on `shop/redact`. ### Audit records on request You may request deletion of your audit history before uninstalling by contacting us at [support@conversionguard.ai](mailto:support@conversionguard.ai). We will delete your audit records within 7 business days of receiving the request. ### What we retain after deletion After a `shop/redact` deletion, we retain one minimal record per store: a boolean flag indicating whether the free-audit entitlement was used, keyed on your Shopify store domain. This record contains no personal data, only the domain and a timestamp, and is kept solely to prevent abuse of the free trial on reinstall. It is not used for any other purpose. ## 7. Your Rights ### Shopify GDPR Webhooks We handle all three Shopify-mandated GDPR webhooks: | Webhook | Our response | |---|---| | `customers/data_request` | Acknowledged. We do not store any customer PII, so there is no customer data to provide. | | `customers/redact` | Acknowledged. We do not store any customer PII, so there is no customer data to redact. | | `shop/redact` | We revoke any connected Google token and delete all data associated with your shop domain within 48 hours of receipt. | ### GDPR (EU/UK Merchants) If you are based in the European Union or United Kingdom, you have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data - Object to or restrict certain processing - Data portability (receive your data in a structured format) To exercise any of these rights, contact [privacy@conversionguard.ai](mailto:privacy@conversionguard.ai). ### CCPA (California Merchants) If you are a California resident, you have the right to: - Know what personal information we collect and how it is used - Request deletion of your personal information - Opt out of the sale of personal information (we do not sell personal information) To exercise your rights, contact [privacy@conversionguard.ai](mailto:privacy@conversionguard.ai). ## 8. Security We take reasonable technical measures to protect your data: - Shopify access tokens are encrypted at rest using AWS Key Management Service (KMS) - Google OAuth refresh tokens are encrypted at rest with the same KMS key; short-lived Google access tokens are minted per request and never persisted - Google credentials stay inside our backend and are never passed to the AI analysis service or its browsing sandbox - All data in transit is encrypted using TLS - API endpoints require Shopify session token (JWT) authentication - Webhook endpoints verify Shopify HMAC signatures before processing - Audit report files are stored in a private S3 bucket and are not publicly accessible; screenshots are served via a restricted CloudFront distribution - The app never writes to your store's theme: theme improvements are delivered as GitHub pull requests you review and merge yourself, or as do-it-yourself instructions No system is completely secure. If you believe your data has been compromised, contact us immediately at [privacy@conversionguard.ai](mailto:privacy@conversionguard.ai). ## 9. Children's Privacy This app is intended for use by merchants operating commercial stores. We do not knowingly collect data from or about individuals under the age of 18. ## 10. Changes to This Policy We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date at the top of this document. For significant changes, we will notify merchants via the app or by email. Continued use of the app after a policy update constitutes acceptance of the revised policy. ## 11. Contact - **Email:** [privacy@conversionguard.ai](mailto:privacy@conversionguard.ai) - **Website:** - **Mailing address:** 2525 W. Grand Ronde Ave, Kennewick, WA --- Canonical page: ยท Last updated: August 14, 2026