Valmont Campaign Guard — Privacy

We read store identity and product data to monitor product links you choose. We do not request customer or order access and do not modify Shopify data.

If you opt in, we store your operational email, confirmation state, and delivery outcomes. Email bodies and delivery records are retained for 30 days. You can unsubscribe in the app or in an alert. We store your shop domain, OAuth sessions, saved campaign names and URLs, product identifiers, check results, and report snapshots. Do not paste links containing personal data or secret tokens. Scans use fresh anonymous HTTP requests; customer browsing sessions are never used.

Checks and audit events are retained for 30 days. Share reports expire after seven days and can be revoked earlier. Anyone holding an active report link can view its snapshot. Tracking parameters are stripped from reports. We do not publish or send reports automatically.

Infrastructure providers process data to operate the service: Railway (hosting and PostgreSQL), Resend (opt-in operational emails), and Shopify (authentication and billing). Store records, reports, and sessions are deleted when Shopify sends an authenticated uninstall or shop-redaction webhook. Backups may persist under infrastructure retention schedules.

For access, deletion, or support, email support@valmontapps.com.