Privacy Policy

1. Introduction

Veloxify ("we", "our", "the App") is a Shopify application that helps merchants optimize their store performance. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

• Store domain — used to connect your Shopify store to the app.
• Shopify access token — required to read and update your store theme and products.
• Web Vitals scan results — LCP, CLS, INP, FCP, TTFB scores stored per scan.
• Image scan data — image URLs, sizes, and optimization status.
• Script scan data — script URLs detected on your storefront.
• Subscription status — your current billing plan (free / pro / business).

We do not collect personal data from your customers (names, emails, addresses, payment info).

3. How We Use Your Data

• To provide the core app features (performance scans, image optimization, script analysis).
• To display your performance history and progress over time.
• To manage your subscription and billing via Shopify Billing API.

4. Data Sharing

We do not sell, rent, or share your data with third parties, except:

• Shopify — to read/write your theme assets and manage billing.
• Google PageSpeed Insights API — your store URL is sent to Google to retrieve performance metrics.
• Neon (PostgreSQL) — our database provider stores your app data securely.
• Sentry — error monitoring. No personal data is sent.

5. Data Retention

Your data is retained as long as your store is connected to Veloxify. When you uninstall the app, your store data is permanently deleted from our database within 48 hours (via GDPR webhook).

6. Your Rights (GDPR)

If you are subject to GDPR, you have the right to access, correct, or delete your data. To exercise these rights, contact us at the email below.

7. Security

We use HMAC-SHA256 session cookies, HTTPS for all connections, and environment-level secrets. Access tokens are stored encrypted in our database.

8. Contact

For privacy questions or data requests, contact us at: lizbetrizmbt@gmail.com