Northsight. Last updated 11 August 2026.
Guard watches a Shopify store's catalogue for changes to product prices and stock quantities, works out how much stock value each change affects, and emails the merchant when a change is significant. This policy explains exactly what Guard stores and why.
Guard requests read_products, read_inventory and
write_products only. It does not request, receive, read or store customer
names, email addresses, shipping addresses, phone numbers, payment details or order
records. Guard has no access to your customers.
| Data | Why | Kept for |
|---|---|---|
| Store domain and Shopify access token | To connect to your store and receive change notifications | Until you uninstall |
| Alert email address you enter | To send you alerts. Nothing else. Never shared, never marketed to | Until you uninstall |
| Product and variant IDs, titles, SKUs, prices, quantities | The baseline Guard compares against. Without a previous value there is nothing to detect a change from and nothing to restore | Until you uninstall |
| Alert history, including a snapshot of previous prices and quantities | So the one click undo in your alert email can restore the earlier values | Until you uninstall |
| Subscription status and trial dates | To know whether your subscription is active | Until you uninstall |
Each alert email contains a single use undo link. Guard stores only a cryptographic hash of that link's token, never the token itself, so the working link exists only in your email. A used or expired link is refused.
Guard sells nothing and shares nothing for advertising. Data passes only to the services required to run it:
Uninstalling Guard from your Shopify admin stops all processing immediately. Guard
implements Shopify's mandatory compliance webhooks, and on a
shop/redact request it deletes the store's records and then re reads the
database to confirm the deletion actually happened before reporting success. You can also
request deletion at any time using the contact address below.
All traffic is over HTTPS. Every incoming request from Shopify is verified with an HMAC signature before it is acted on, and requests failing verification are rejected. Access tokens are stored in a database not reachable from the public internet.
Guard's database and functions are hosted with the providers listed above, which operate across multiple regions. Guard is operated from New Zealand.
If this policy changes materially, the date at the top of this page changes and, where the change affects what Guard stores or who it shares with, merchants with an active installation are notified by email.
Questions, or a deletion request: support@northsight.app