Privacy Policy

Who we are

Page Proof (“we”, “us”) is a Shopify app operated at pageproof.syncerp.work, hosted on our own server infrastructure (syncerp.work). For any privacy question, contact privacy@syncerp.work.

Shopify permissions we request

Page Proof requests these Shopify scopes and nothing more: read_products, write_products, read_content, write_content, read_online_store_pages and write_online_store_pages. The read scopes let us list your product and page URLs and read your own catalog/content; the write scopes are used only when you explicitly approve applying an AI copy-fix snippet back to a product or page description.

We do not request read_orders, read_customers or any theme scope. Because we hold no order or customer data, Page Proof is Protected Customer Data Level 0. See our PCD disclosure for the full breakdown.

Data we store

• Your shop domain and your plan / billing status.
• The CRO audits you run: the audited URL, the predicted score, and the per-check findings.
• A record of each AI copy-fix: the page it addressed and a snapshot of the prior text, so the change stays reversible.
• Coarse, non-content metadata for AI fixes (model id, token counts, timestamps) to meter usage.

None of this contains customer personally identifiable information (PII), because we never receive it.

What we do NOT collect

• No orders, line items, transactions or fulfillment data.
• No customers, contact details or any personally identifiable information.
• No payment card data (billing is handled entirely by Shopify).

AI copy-fix & sub-processors

The optional AI copy-fix sends your own product or page title and description to Anthropic, our LLM sub-processor, to generate a grounded reassurance block. Anthropic’s commercial API terms apply: your content is not used to train models. Our own wrapper logs only metadata (model id, token counts, latency, request id) and never records the prompt or the generated text. No orders or customers are ever sent, because we never have them. AI fixes run on our own managed Anthropic key under your plan’s credit quota — you never supply an API key. We use these sub-processors:

• Shopify — app platform, authentication and billing.
• Anthropic — the LLM that generates the optional copy-fix.
• Our own hosting (syncerp.work) — where the app and its database run.

Retention & deletion (GDPR)

We keep your audits and fix history for as long as the app is installed, so your score history and reversible fixes remain available. We implement Shopify’s mandatory privacy webhooks: customers/data_request and customers/redact truthfully report that we hold no customer data; shop/redact cascade-deletes your shop’s rows. Uninstalling immediately deletes the access token we hold for your store and cancels any subscription; your audit and fix history is then erased when Shopify sends shop/redact, which it does about 48 hours after an uninstall. To have it erased sooner, or at any other time, email privacy@syncerp.work.

Your rights

Depending on your jurisdiction you may have the right to access, correct, export or delete the data we hold about your shop. Since we hold no customer PII, these rights concern only your shop-level records (audits, fix history, billing status). Contact privacy@syncerp.work to exercise them.

Changes to this policy

If we materially change how we handle data, we will update this page and its “last updated” date. Continued use after a change means you accept the updated policy.