Privacy Policy

Last updated: July 5, 2026

What AppDrain Does

AppDrain is a Shopify app that creates a baseline of your store and monitors it daily for changes — new scripts, removed scripts, app installs and uninstalls, and changes to tracking or cart-related scripts. It surfaces what changed; decisions remain with you.

Data We Collect

• Shop domain — your Shopify store URL (e.g. your-store.myshopify.com)
• Installed apps — app names and pricing, used to detect conflicts and duplicate subscriptions
• Store snapshot data — script lists, app lists, and change diffs captured during baseline checks. No customer data is accessed.
• Store snapshots — a timeline of scan results to detect changes over time. Contains technical findings only.
• OAuth access token — encrypted at rest using AES-256. Used to fetch app data via the Shopify Admin API. Never shared.

Data We Do NOT Collect

• Customer names, emails, or personal information
• Order history or financial data
• Payment card information
• Product inventory or pricing data

Read-Only Access

AppDrain requests read-only Shopify permissions. We never modify your store, add or remove apps, or make changes to your Shopify account.

Data Storage

Your data is stored securely on Railway infrastructure. Access tokens are encrypted before storage. We do not sell or share your data with third parties.

Data Deletion

When you uninstall AppDrain, your store record is immediately marked inactive. All data — scan findings, app lists, snapshots, and your access token — is permanently deleted within 48 hours of Shopify's shop/redact webhook. To request immediate deletion, email kestisjustis@gmail.com.

GDPR Rights

If you are in the European Economic Area, you have the right to access, correct, or delete your data. We respond to all mandatory Shopify GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Contact us at kestisjustis@gmail.com to exercise your rights.

Shopify Data Processing

AppDrain operates as a Shopify partner in accordance with Shopify's Privacy Policy.

Contact

Questions? Email kestisjustis@gmail.com