DocuSentry Privacy Policy

1. Data we collect

When you install the app, we receive your store domain, shop identifier, and the authorization and session information needed to connect to Shopify. We access product information needed to show and manage document assignments.

You may provide document titles, types, languages, version and batch notes, source file URLs, product assignments, and storefront library settings. We store links and metadata, not copies of the files at those URLs.

If you contact support in the app, we store your name, email address, store identifier, and message. We also record limited feature-use events, review-invitation preferences, file health results, and technical error logs.

When someone opens a DocuSentry document page or library on a merchant storefront, our hosting service processes the request and may record ordinary network information such as the requested path, IP address, and browser details in its logs. We do not add GA4 tracking to those storefront pages.

2. App Store listing analytics

Our Shopify App Store listing uses Google Analytics 4 (GA4) to understand visits and installations. Browser-based measurement may process the listing URL, referral source, page interactions, device information, approximate location, and cookies or similar identifiers.

When a merchant completes installation, Shopify may send GA4 an installation event containing the app identifier and the store's identifier, name, and URL. GA4 is configured for the App Store listing; our embedded admin app and merchants' storefronts do not send their feature-use events to this GA4 property.

How Google uses information from sites and apps that use its services

3. How we use data

We use merchant data to publish and version documents, create stable links and QR codes, assign documents to products, operate the storefront library, check file health, answer support requests, secure and troubleshoot the service, and understand which features are useful.

GA4 listing data helps us understand how merchants discover the app and whether listing visits lead to installations. We do not use support messages or document contents as GA4 event data.

4. Service providers and sharing

Shopify provides the app platform and APIs. Railway hosts our application and PostgreSQL database. Cloudflare R2 stores database backups. Google processes App Store listing analytics. If enabled, Sentry processes technical error data and Resend delivers support-request notifications that include your support message and contact details.

To check a document link, our server requests the source URL you supplied; the file host can see that request. These providers may process data in countries other than your own. We do not sell merchant or visitor data. We may disclose information when required by law or needed to protect legal rights and service security.

5. Retention and deletion

We retain merchant records while the app is installed. After a valid Shopify uninstall or shop-redaction webhook, we delete that store's active application records and sessions. A pseudonymous uninstall event may remain until Shopify's later shop-redaction request.

Database backups and provider logs may retain older copies until their configured retention periods expire. GA4 App Store listing events are held separately and are not automatically deleted when a merchant uninstalls the app. Contact us to ask about access to or deletion of data where applicable.

6. Your choices and rights

You can ask us to access, correct, or delete data associated with your store by using the contact address below. Support requests and app-review invitations are optional; you can choose not to receive further review invitations.

Where available, use the Shopify App Store's privacy choices or your browser settings to limit browser-based analytics. Google's browser add-on can also opt your browser out of GA4 collection; it does not prevent Shopify from sending a server-side installation event.

Google Analytics opt-out browser add-on

7. Security and service limits

Traffic is transmitted over HTTPS. Shopify permissions are limited to app functionality, file URL checks include protections against private-network access, and application data queries are scoped by store identifier. We limit the request context sent to error monitoring to the HTTP method and path, and do not intentionally include document contents, access tokens, customer data, or order data. Error details may nevertheless reflect the failed operation. No internet service can guarantee absolute security.

DocuSentry manages documents you provide. It does not draft safety documents or provide legal or regulatory compliance advice.

8. Changes and contact

We may update this policy and will post the revised date here. For privacy questions or data requests, email Micheal.anderson1997@outlook.com. We may need to verify that you are authorized to act for the store before fulfilling a request.