Privacy Policy

PriceProof: Price Proof — Privacy Policy

Effective: 2026-07-12

Gyutae Oh (sole proprietor) ("we") provides the PriceProof: Price Proof Shopify app, which records a store's offered-price history and helps merchants keep the records that substantiate their strikethrough "was" prices in the United Kingdom, Australia and Canada. This policy explains what personal data we process. We are an independent data controller for the limited account data described below. We do not collect, receive, or store your customers' (consumers') personal data, and we do not access orders.

1. What we collect

• Shop identifiers & owner contact: your myshopify domain, shop owner name and email, and the OAuth access token issued by Shopify at install (stored encrypted). Used to operate the App, bill you, and provide support.
• Product price data: product/variant identifiers and the publicly offered prices of your own catalog over time, plus the market settings you choose. This is commercial data about your products, not personal data; we store it because the price-history record is the product's core function.

We request only the write_products API scope (product read and metafield read/write) needed to record prices and write the assessment metafield your theme block reads. We do not request the orders or customers API scopes and do not process consumer personal data. Compliance webhooks that Shopify requires us to register (customers/data_request, customers/redact) may deliver a payload containing a customer identifier; we do not store the body of these payloads — we acknowledge receipt only.

2. Legal bases (GDPR / UK GDPR)

Performance of our contract with you (providing and billing the App) and our legitimate interests in operating, securing, and supporting the service.

3. Where data is stored

Our servers are located in the United Kingdom (London), hosted on Fly.io. For merchants in the EU, the UK benefits from a European Commission adequacy decision; for UK merchants no transfer occurs.

4. Retention & deletion

We retain your price-history records for as long as needed to provide the service (the audit-evidence record is the point of the App). When you uninstall, we delete your shop's sessions, settings and price history immediately; Shopify additionally sends a shop/redact request approximately 48 hours later, which we honor by hard-deleting any remaining rows.

5. Sharing

We do not sell your data and do not use data from one merchant for the benefit of another (no cross-merchant use). Subprocessors (hosting) act on our behalf under contract; a current list is available on request.

6. Your rights

You may request access, correction, deletion, or export of your account data, or object to processing, by contacting us at nsjokt@gmail.com. You may also lodge a complaint with a supervisory authority (for the UK, the ICO). We respond to requests within 30 days.

7. Contact

Controller: Gyutae Oh (sole proprietor), nsjokt@gmail.com