Privacy Policy

1. Scope

This Privacy Policy applies to MerchVitals, a Shopify application operated by AMERICAN SOUTHERN IDEATC LLC. It explains how information is processed when a merchant installs, authorizes, or uses MerchVitals.

2. Information we process

MerchVitals processes the merchant store domain, Shopify authorization and session information required to operate the installed application, and product catalog information requested by the merchant for an audit.

The standard app configuration requests read-only product access. A restricted development-store configuration also requests product write access to create Shopify draft products after explicit operator confirmation; source images require separately granted file-write access. Neither configuration requests customer, order, or payment access. The permissions actually available depend on what the store has granted.

In the restricted Shop Growth trial, merchants may upload summarized Shop report values and save Shop readiness evidence, product-level Shop channel observations, Shop Post drafts, review notes, product optimization proposals, internal Product Ops intake decisions, and page-planning snapshots. A planning snapshot stores selected Shopify product fields and merchant-supplied product facts with a source note. A separately staged storefront packet may contain selected product description and merchant facts; it remains private until a separate publication approval. Voiding a report row retains its original value and a reason. Where available, a Shopify staff user ID is recorded with imports, observations, proposals, drafts, reviews, and Product Ops decisions for an audit trail.

The restricted product-upload workspace may store merchant-submitted product facts, source notes, variant SKUs and prices, optional inventory and cost plans, source image links and notes, reference links, upload plans, and draft-creation history. Inventory and cost plans remain internal unless a separately reviewed write feature is introduced.

We may also process limited technical information, such as request timing, response status, and server diagnostics, for security, reliability, and troubleshooting.

3. How information is used

Information is used to authenticate the merchant, retrieve selected Shopify product information, generate product readiness diagnostics, display merchant-imported Shop performance values, store content drafts and improvement proposals, maintain application security, investigate errors, and satisfy applicable legal or Shopify platform requirements.

Product audits do not change Shopify products. In the restricted development-store product-upload workflow, an authenticated operator can confirm creation of a Shopify draft product from a reviewed package; that action does not publish the product. Internal Shop Growth suggestions, Shop Post drafts, and page-planning records do not themselves change Shopify products.

4. Storage and retention

Shopify session records and merchant-owned audit records may be retained while needed to operate the installed application. Shop Growth records and restricted product-upload packages, source evidence, plans, review decisions, and draft-creation history are stored per shop. They are removed on uninstall and shop redaction through the app's tenant cleanup flow.

Limited operational logs may be retained for security and troubleshooting. Logging controls are designed to avoid recording authentication query strings, authorization headers, or Shopify HMAC values.

An authenticated Shopify shop-redaction request removes session and shop-owned business data, subject to applicable legal obligations and operational recovery requirements. Limited billing idempotency evidence may be retained after uninstall until shop redaction.

5. Sharing and service providers

Information may be processed by Shopify and by infrastructure or service providers used to host, secure, and operate MerchVitals. We do not sell merchant or Shopify product information.

We may disclose information where required by law, to protect legal rights, or to investigate abuse or security incidents.

6. Shopify privacy requests

MerchVitals maintains the Shopify-required customer data request, customer redaction, and shop redaction webhook endpoints. Because the app does not request customer-data scopes, customer privacy requests normally do not involve stored customer records within MerchVitals.

7. Security

We use reasonable administrative and technical safeguards intended to protect application information. No system can guarantee absolute security, and merchants should protect their Shopify credentials and administrator access.

8. International processing

Information may be processed in the United States or in other locations where Shopify or application service providers operate. Appropriate safeguards are used where required by applicable law.

9. Changes to this policy

This policy may be updated as MerchVitals develops, its commercial model changes, or legal and Shopify platform requirements evolve. The updated date on this page will identify the current version.

10. Contact

Privacy questions, access requests, or deletion inquiries can be sent to support@SellerToolsClaw.com.