Privacy Policy: Shopatch Theme Audit
Last updated: 19 August 2026
This policy covers the Shopify app Shopatch Theme Audit, running at audit.shopatch.com. The website shopatch.com is covered by a separate policy, because a different relationship applies there: towards site visitors Shopatch is the controller, while inside the app Shopatch processes shop data on behalf of the merchant.
Who is responsible
Shopatch, Werner Mathias Bundschuh, an Individual Entrepreneur registered in Georgia (IE Reg. No. B25175473, see Legal Notice). Contact: [email protected].
The place of business is outside the EU, so a representative under Art. 27 GDPR has been appointed. For data subjects in the EU, that representative is the direct route.
Representative in the EU
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:
- European Union (EU)
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/shopatch
The short version
The app processes no personal data of your customers. That is not a promise, it is a design decision you can read off the permissions it asks for:
read_themes · read_products · read_legal_policies
Deliberately not requested: read_customers, read_orders, read_all_orders, read_customer_events. The app cannot retrieve customer data at all. What we do not hold, we cannot mishandle.
Two roles, and they are not the same
For your shop data (theme files, colour settings, product fields, store policies) Shopatch acts as your processor. The data is yours; it is processed only to produce the audit you asked for, and only on your instruction, which you give by installing the app and starting a run.
For your own contact details (the shop domain, and the email address you may enter for Watcher notices) Shopatch is the controller, because that data serves our relationship with you as a customer, not the running of your shop.
What the app reads
| What | Why | Stored |
|---|---|---|
| Theme files (Liquid, JSON, CSS) | checks on code defects | no, only a hash per file |
config/settings_data.json | contrast across every colour scheme | no, only a hash |
| Product titles, SEO fields, alt text | checks for missing mandatory fields | no, only a hash |
| Store policies (imprint, privacy, returns) | a check on whether they exist | no, only a hash |
| Your shop timezone | so scheduled times read correctly | no, held in memory only |
Files are fetched, checked and discarded. They are never written to disk and never sent anywhere else.
What the app stores
- File hashes. A short checksum per file, so a later run can tell whether something changed. The content cannot be reconstructed from a hash.
- Findings. The rule, the file, the spot within it (a CSS selector, a setting id or a product handle), the severity, and the explaining sentence in both languages. A finding therefore quotes a small fragment of your theme, such as a selector or a colour value. It never contains a file.
- Timestamps of the runs.
- The session: your shop domain and an access token, so the app can work at all. This is an offline token; it carries no name and no email address of yours.
- The Watcher, if you set one up: which theme, how often, in which language, and optionally an email address you enter yourself. Without an address the Watcher only records; it does not write to you.
Legal basis
- Running checks and keeping the history: performance of a contract, Art. 6(1)(b) GDPR. This is the service you install the app for.
- The Watcher email: performance of a contract, Art. 6(1)(b) GDPR, insofar as you enter an address in order to receive the notice. You can remove the address at any time, and the Watcher keeps working without it.
- Shop data: processed on your behalf under Art. 28 GDPR. Towards your own customers you remain the controller.
Who else processes the data
The audit runs entirely on infrastructure we operate ourselves. One processor is involved in operating it:
| Processor | What for | Where |
|---|---|---|
| Scaleway SAS | application hosting (Serverless Containers) | Paris, France (fr-par) |
| Scaleway SAS | database (Serverless SQL, PostgreSQL) | Paris, France (fr-par) |
| Scaleway SAS | delivery of Watcher emails (Transactional Email) | Paris, France (fr-par) |
Scaleway SAS is a French company; the data stays inside the EU and no transfer to a third country takes place. Shopify itself is not our processor: it is the source of the data, and you already have your own agreement with it.
There is no transfer to advertising networks, analytics services or AI providers. No part of your shop data is used to train a model.
How long it is kept
- While the app is installed, your runs stay. There is no fixed expiry, and that is deliberate: the point of the paid tier is a history that grows over time. A run deleted after ninety days would take the comparison with it.
- On the free tier, only the last two snapshots per theme are kept. Older ones fall away by themselves.
- When you uninstall the app, the session is deleted immediately (
app/uninstalled). - On erasure (
shop/redact, which Shopify sends 48 hours after uninstallation) everything belonging to your shop is deleted: runs, findings, hashes, Watchers and the session. Technically this is a single delete, because findings and hashes hang off the run.
You do not have to wait for that. Every report and the full history can be exported as a file at any time, on the free tier too.
The three mandatory webhooks
| Webhook | What happens |
|---|---|
customers/data_request | we confirm that no customer data is held |
customers/redact | there is nothing to delete, see above |
shop/redact | all runs, findings, hashes, Watchers and the session of that shop are deleted |
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. The quickest route is the Prighter portal linked above, or [email protected].
For portability, the export inside the app is usually faster than a request to us: it gives you the same data, immediately, as a file.
What the app deliberately does not do
- It changes nothing in your shop.
write_themesis not requested, so theme files cannot be written even by mistake. - It injects no script into your storefront. Nothing is added to your theme, nothing overlays your page, nothing slows it down.
- It issues no certificate of compliance. An automated checker can name what is visible in the code. Whether a legal text is sufficient is not for a program to decide.
- It sends nothing to an AI provider.
Changes to this policy
If what the app does with data changes, this page changes with it, and the date at the top moves. The last substantive change was the move to our own hosting at Scaleway and the introduction of Watcher emails, both on 19 August 2026.