CommerceGuardian OS ("CommerceGuardian", "we", "us", or "our") provides an app that helps Shopify merchants review address, order, catalog, pricing, and fulfillment risks. This policy explains how we collect, use, disclose, retain, and protect personal information through the app and our public website.
Shopify merchants determine how to use customer data in their stores. When we process customer order information to provide the app to a merchant, we generally do so on that merchant's behalf. For requests about a specific order, customers should first contact the merchant they purchased from.
1. Information we collect
Depending on the features a merchant enables, we may process:
- Information from Shopify: store domain and merchant account details; order identifiers and status; customer email and shipping address; fulfillment-order identifiers and status; and relevant product, catalog, and pricing data needed for order-risk and operational checks.
- Information from merchants: app settings, subscription and usage details, support communications, and optional connected-provider configuration or keys.
- Information from customers: delivery-address corrections submitted through secure, order-specific correction links, along with the status of those requests.
- Technical information: limited request, device, browser, session, and diagnostic information that may be processed to operate, troubleshoot, and secure the app or website.
The public website's setup-help form is currently inactive and does not accept submissions. The Shopify app may use essential session technology, and hosting services may process technical request information.
2. How we use information
We process information to:
- identify suspicious, incomplete, or mismatched delivery information;
- generate order, catalog, pricing, and fulfillment-risk signals;
- display merchant review queues and manage app-owned order tags or fulfillment holds;
- send secure customer correction emails and process submitted address updates;
- provide merchant settings, usage limits, billing integrations, and support; and
- maintain service security, diagnose errors, and comply with legal obligations.
Risk signals are decision-support information, not a guarantee of delivery or a substitute for a merchant's own fulfillment review. We do not sell merchant or customer personal information.
3. Service providers and sharing
Information may be processed by Shopify and service providers supporting app hosting, data storage, security, and transactional email. Certain optional features may send only the information needed for a requested check to address validation providers (such as Google Address Validation, Smarty, or USPS) or configured AI providers. Which providers are involved depends on the features enabled and how the service is configured.
Free local AddressGuardian plausibility checks run inside the app without sending addresses to an external address-validation provider. When available, a merchant may connect an AI provider using their own credentials. We may also disclose information when legally required or to protect the service and its users.
4. Retention and deletion
The app's documented default data-retention period is 180 days, and merchants can configure a shorter period in Settings. Actual retention may vary by record type and may be extended where necessary for security, accounting, legal compliance, or the handling of an outstanding request.
Uninstalling the app stops its ongoing Shopify API access. We support Shopify's customer data request, customer redaction, and shop redaction webhook processes. For an access or deletion request, contact the relevant merchant or email us at info@commerceguardianos.com so we can review the request and applicable retention obligations.
5. How we protect information
We use controls intended to limit access to personal information, including encrypted address snapshots and correction-email previews, hashed one-time correction tokens, restricted app access, and redaction of personal details from operational logs where possible. No internet-connected service can guarantee absolute security.
6. Your privacy rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or portability of your personal information, or to object to certain processing. Merchants' customers should contact the merchant first because the merchant controls the underlying store and order relationship. Merchants and other individuals can contact us directly using the address below.
Where privacy law requires a legal basis, we process merchant account and operational information as necessary to provide the service, support legitimate security interests, or meet legal obligations; customer order processing is generally performed on the merchant's instructions.
7. International processing
Our service providers may process information in countries other than the country where a merchant or customer lives. Such processing is subject to applicable data-protection requirements and the arrangements governing the service providers involved.
8. Changes to this policy
We may update this policy to reflect changes to the app, its service providers, or applicable requirements. The last-updated date at the top indicates when this version was published.
9. Contact
For privacy questions, access requests, deletion requests, or requests for further information about CommerceGuardian OS data handling, contact:
CommerceGuardian OS
Email: info@commerceguardianos.com
You can also review our security and compliance-readiness approach.