Privacy policy

Feed Integrity Sentinel compares a merchant's product feed against their live Shopify catalog and emails them when a new mismatch appears. This page describes exactly what that requires us to touch.

What we read from your store

Once you install the app we hold a read_products access token for your shop. We use it only to read product and variant fields needed for the comparison: handle, title, status, online store URL, SEO fields, price, barcode (GTIN), inventory quantity and inventory policy.

We do not request, read, or store customer records, orders, checkouts, payment details, or any other protected customer data. The app never asks for those scopes.

What we store

• Your shop domain.
• Your Shopify access and refresh tokens, encrypted at rest with AES-GCM.
• The product feed URL and the notification email address you enter in the app.
• A snapshot of the most recent scan: per-product mismatch fingerprints and red/amber/green counts. This is what lets us email you only about new problems instead of the same ones every day.

We do not store your product catalog. Product data is fetched, compared in memory and discarded within the request.

Who else sees it

• Cloudflare Workers & KV — hosting and storage for everything listed above.
• Resend — delivery of alert emails. Resend receives the destination address and the alert body, which names the affected products and the mismatched fields.

We do not sell, rent, or share your data with anyone else, and we do not use it for advertising or to train models.

Retention and deletion

When you uninstall the app, Shopify sends us an app/uninstalled webhook and we delete your tokens, feed settings and scan snapshot. You can also request deletion at any time by emailing cardi.workshop@gmail.com.

We implement Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Because the app stores no customer data, customer requests return nothing to disclose and nothing to erase; shop redaction deletes the records listed above.

The free checker

The public checker on the home page needs no install. It fetches the two URLs you paste, compares them and returns the result. We do not persist those URLs or their results on the server; the "first seen" timestamps live in your own browser's local storage.

Contact

Questions about this policy, or about data we hold: cardi.workshop@gmail.com.

Last updated 2026-08-10 · Free feed checker · Support · Privacy