PRIVACY DETAILS ยท DEVELOPMENT DRAFT
How OfferProof handles your data
Updated October 25, 2026. These details describe the current implementation. Production service providers and remaining policy facts must be finalized before public release.
What the app stores
Shop identity and installation authorization, Shopify session tokens, scoped Storefront access, selected catalog facts, approved campaign URLs and market contexts, reference sources, check results, findings, job status and limited webhook metadata. Campaign codes and evidence are encrypted with application-managed keys; session tokens remain within the official server-side session store and require protected production storage.
The current application is hosted on DigitalOcean. Its SQLite app database is stored on that same host alongside the application service.
Purpose and Shopify access
We use this data to compare approved offers with current product, variant, price, availability and optional anonymous-cart discount facts. The app does not request customer or order access. Anonymous cart probes do not submit orders or payments. Shopify processes API requests and their associated operational data under its own policies.
OfferProof also makes bounded server-side HTTPS requests to merchant-approved storefront product URLs. Redirects are limited to storefront hosts verified for the authenticated shop. These requests use fixed headers without browser cookies, authorization, referrer, customer data or checkout credentials. Response HTML is inspected transiently for access gates and then discarded; the app retains sanitized status, redirect, variant-review and timing evidence.
OfferProof does not install storefront pixels, set cookies on customers' devices or collect customer browsing and navigation behavior.
History and retention
Plans retain detailed check and finding evidence for 30, 90 or 180 days. Retention cleanup can run during supported app operations, such as exports and catalog operations, and through background worker maintenance. If the worker is disabled or unavailable, background cleanup may be delayed. Approved references remain available while installed. An unresolved finding whose detailed evidence expires remains labeled evidence expired rather than being marked recovered; exports identify history limits. A separate lifecycle authority records only opaque keyed installation and erasure events so a restored primary database cannot revive erased tenant data. Production backup retention and recovery verification remain release requirements.
Your controls
You can pause automatic checks, stop individual offers and export retained references and evidence without an active paid plan. Exported copies stay under your control. Uninstalling revokes app access; the uninstall and Shopify shop-redaction handlers erase app-owned shop records and sessions. Reopening after erasure requires a fresh Shopify-authenticated installation and does not restore old tenant data. Customer privacy webhooks are handled without storing customer payloads.
Contact and release status
New Tech is operated by Justin Walker in New York, United States.
Support email is sent through the sender's email provider and received in Justin Walker's Microsoft Outlook mailbox. Those messages are separate from the app database; uninstalling the app or deleting app records does not automatically delete email copies held by either provider or mailbox.
Contact justinwalker4233@outlook.com for app data questions or requests for access, correction, deletion, or restriction of app-held data.
Do not include customer details, private tokens or unrelated personal data in campaign links or reference notes.