ShopMender
Legal information · draft for review

Privacy Policy

How data is handled when you create an account, submit a store URL or use monitoring.

This launch-ready template contains explicit company placeholders and must be reviewed for the operator’s company and jurisdiction before production.

ShopMender is operated by LEGAL_COMPANY_NAME, at LEGAL_ADDRESS, in LEGAL_COUNTRY. Privacy enquiries: LEGAL_EMAIL.

Data we process

  • Account information such as name, email, profile image and authentication records.
  • URLs submitted for scans and publicly accessible store content needed to produce findings.
  • Technical logs, security events and a keyed hash of request identifiers used for abuse prevention.
  • Subscription status, Stripe customer identifiers and billing metadata. Raw card data is handled by Stripe, not ShopMender.
  • Affiliate applications, referral codes, daily aggregate link clicks, attributed accounts, invoice amounts and commission status.
  • Enterprise inquiry details such as contact information, company, storefront volume, stated timeline and operating requirements.
  • When optional Google Analytics is configured, page views, limited product-interaction events and browser or device metadata supplied by Google Analytics.

Authentication and service providers

Google may process data when Google OAuth is used and, only when configured, when Google Analytics is enabled. SMTP infrastructure delivers magic links, alerts, affiliate application notifications and Enterprise inquiry notifications. Stripe processes checkout, billing and portal requests under its own terms.

Cookies

Essential cookies support authentication, security and billing continuity. An affiliate referral cookie can preserve partner attribution for 30 days without storing visitor identity inside the cookie. Google Analytics is disabled by default and can use analytics cookies only when configured by the operator.

Purpose and retention

Data is used to provide scans, secure accounts, manage subscriptions and affiliate commissions, respond to Enterprise inquiries, prevent abuse, monitor reliability and deliver requested alerts. Optional analytics helps measure product usage and funnel performance. Retention periods must be finalized by the operator before launch; data should be kept only as long as needed for those purposes and legal obligations.

Your rights

Depending on applicable law, users may request access, correction, deletion, restriction, portability or objection. Requests should be sent to the legal email above. Identity may be verified before action is taken.

Security and international processing

Reasonable technical and organizational safeguards are used, but no service can promise absolute security. The final operator must document provider locations and any required transfer safeguards.