CSV Shield - Privacy Policy

Last Updated: December 15, 2025

Introduction

CSV Shield ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our Shopify app.

Information We Collect

CSV File Data

What we collect: When you upload a CSV file for validation, the file content is processed in your browser and sent to our server for validation.

How we use it: CSV data is used solely for validation purposes to identify errors and inconsistencies before import.

Storage: CSV file data is processed ephemerally and is not stored on our servers. All processing occurs in memory and data is discarded immediately after validation completes.

Shopify Account Information

What we collect: When you install CSV Shield, Shopify provides us with basic account information through OAuth authentication, including:

  • Shop domain
  • Session tokens for API access

How we use it: This information is used solely for app authentication and to provide app functionality.

Storage: Session data is stored securely using Prisma and PostgreSQL for authentication purposes only.

Usage Data

What we collect: We may collect anonymous usage statistics such as:

  • Number of validations performed
  • Types of errors detected
  • App performance metrics

How we use it: This data helps us improve app functionality and user experience.

Storage: Usage data is aggregated and anonymized.

What We Don't Collect

  • We do not store your CSV file content permanently
  • We do not share your data with third parties
  • We do not use your data for advertising or marketing purposes
  • We do not access your Shopify store data beyond what's necessary for authentication

Data Processing

Client-Side Processing

CSV files are initially parsed in your browser using PapaParse. This reduces server load and improves privacy.

Server-Side Validation

Validation occurs on our servers for security and consistency. All data is processed in memory and discarded after validation. No persistent storage of CSV content.

Data Security

We implement industry-standard security measures to protect your information:

  • Secure OAuth 2.0 authentication via Shopify
  • Encrypted data transmission (HTTPS)
  • Secure session storage using Prisma and PostgreSQL
  • No persistent storage of sensitive CSV data

Third-Party Services

Shopify

CSV Shield integrates with Shopify's platform. Your use of CSV Shield is also subject to Shopify's Privacy Policy. We only access Shopify data necessary for app authentication.

Hosting Provider

Our app is hosted on Render. Render's infrastructure complies with industry security standards. See Render's Privacy Policy for details.

Your Rights

You have the right to:

  • Access: Request information about data we hold
  • Deletion: Request deletion of your account and associated data
  • Uninstall: Remove the app at any time through your Shopify admin

To exercise these rights, contact us using the information provided below.

Data Retention

  • CSV File Data: Not retained - processed ephemerally and discarded immediately
  • Session Data: Retained only while the app is installed
  • Account Data: Deleted when you uninstall the app

Children's Privacy

CSV Shield is not intended for users under the age of 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy in this document
  • Updating the "Last Updated" date
  • For significant changes, we may provide additional notice through the app

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: support@setec.ca
  • Shopify App Support: Available through the Shopify Partner Dashboard

Compliance

CSV Shield complies with:

  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)
  • Shopify's App Store requirements

Note: This privacy policy applies to CSV Shield as a validation tool. When you import validated CSV files into Shopify, that process is governed by Shopify's own privacy and data handling policies.