Privacy Policy

1. Scope

This Privacy Policy applies to MerchVitals, a Shopify application operated by AMERICAN SOUTHERN IDEATC LLC. It explains how information is processed when a merchant installs, authorizes, or uses MerchVitals.

2. Information we process

MerchVitals processes the merchant store domain, Shopify authorization and session information required to operate the installed application, and product catalog information requested by the merchant for an audit.

The current application requests read-only product access. It does not request customer, order, payment, or write permissions.

We may also process limited technical information, such as request timing, response status, and server diagnostics, for security, reliability, and troubleshooting.

3. How information is used

Information is used to authenticate the merchant, retrieve selected Shopify product information, generate an on-demand product readiness audit, maintain application security, investigate errors, and satisfy applicable legal or Shopify platform requirements.

MerchVitals does not use Shopify product information to make automatic changes to a merchant store.

4. Storage and retention

Shopify session records may be retained while needed to operate the installed application. The current beta is designed not to maintain generated audit reports as a separate long-term audit-history database.

Limited operational logs may be retained for security and troubleshooting. Logging controls are designed to avoid recording authentication query strings, authorization headers, or Shopify HMAC values.

Session information is deleted when required by an authenticated Shopify shop-redaction request, subject to applicable legal obligations and operational recovery requirements.

5. Sharing and service providers

Information may be processed by Shopify and by infrastructure or service providers used to host, secure, and operate MerchVitals. We do not sell merchant or Shopify product information.

We may disclose information where required by law, to protect legal rights, or to investigate abuse or security incidents.

6. Shopify privacy requests

MerchVitals maintains the Shopify-required customer data request, customer redaction, and shop redaction webhook endpoints. Because the app does not request customer-data scopes, customer privacy requests normally do not involve stored customer records within MerchVitals.

7. Security

We use reasonable administrative and technical safeguards intended to protect application information. No system can guarantee absolute security, and merchants should protect their Shopify credentials and administrator access.

8. International processing

Information may be processed in the United States or in other locations where Shopify or application service providers operate. Appropriate safeguards are used where required by applicable law.

9. Changes to this policy

This policy may be updated as MerchVitals develops, its commercial model changes, or legal and Shopify platform requirements evolve. The updated date on this page will identify the current version.

10. Contact

Privacy questions, access requests, or deletion inquiries can be sent to support@SellerToolsClaw.com.