ClaimSafe EU is a Shopify app that scans a shop's own product, collection and page text for environmental-claim wording restricted by Directive (EU) 2024/825, rewrites it when the merchant asks, and renders the harmonised EU legal-guarantee notice. This page explains what the app stores while it does that.
The data controller is Delano Nocilla, sole trader, trading as ClaimSafe EU, Malta. For anything on this page, including access, correction and deletion requests, write to info.amquotes@gmail.com.
myshopify.com domain and the Shopify API access token issued when you install the app. The token is what lets the app read and write the shop content you asked it to fix.No customer data. The app never requests the read_customers or read_orders scopes, and it does not read, receive or keep names, addresses, email addresses, order history or payment information belonging to your shoppers. It does not use cookies for analytics, advertising or tracking, and it does not run a third-party analytics script. The only cookies involved are the session cookies Shopify itself sets to keep you signed in to the admin.
The text the app reads is your own shop content. If you put personal data into a product description, it will appear in a finding like any other text; that is your content, and deleting it in Shopify and re-scanning removes it here.
The data above is processed to provide the service you installed the app for. Where the GDPR applies, the basis is performance of a contract with you, the merchant. Where the app processes your shop's content on your instructions, ClaimSafe EU acts as a processor and you remain the controller of that content.
The application runs on Fly.io in Amsterdam and the database is PostgreSQL hosted by Neon in Frankfurt. Both are in the European Union. Shopify itself is the source of the shop content and handles it under its own terms. No other processor receives your data.
Session records are deleted as soon as the app is uninstalled. Everything else - settings, scans, findings and change history - is deleted when Shopify sends the shop-redaction request that follows an uninstall, which Shopify sends 48 hours after the app is removed. You can also ask for deletion at any time by email.
Under the GDPR you can ask for access to your data, correction, deletion, restriction, a portable copy, or object to processing. Email info.amquotes@gmail.com and the request will be answered within one month. If you are not satisfied, you can complain to your national data protection authority; in Malta that is the Information and Data Protection Commissioner.
Traffic is served over HTTPS. Access tokens and database credentials are held as encrypted secrets on the hosting platform, not in the source code. Access to the production database is limited to the controller named above.
If what the app stores changes, this page changes with it and the date at the top is updated. Material changes will also be mentioned in the app.