Privacy Policy

Merceful helps Shopify sellers review product readiness by identifying missing, risky, inconsistent, or low-quality product data before publishing.

We may collect your account email, authentication identifiers, subscription status, store connection status, extension access tokens, and product data needed to run readiness checks, such as titles, descriptions, SEO fields, image alt text, and metafield values.

We also collect basic technical information needed to operate the service, such as request timestamps, error logs, and connection status.

We collect this information to sign users in, connect accounts to subscriptions, verify access, read product data, show readiness issues, apply approved changes, keep the extension connected, prevent abuse, and provide support.

When you open Merceful on a Shopify admin page, the extension reads the active Shopify page URL to identify the store and product you are viewing. It sends the store domain and product identifier to the Merceful backend, which retrieves the product fields needed for the readiness check through Shopify's Admin API.

The extension stores its Merceful connection token and basic connection state in browser extension storage. It does not receive or store your Shopify Admin API access token. The extension does not use Shopify page activity or product data for advertising, unrelated profiling, or sale to third parties.

Merceful's use and transfer of information received from browser extension APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Human access to product or account data is limited to cases where you request support, where it is necessary for security, or where applicable law requires it.

Merceful stores only the information needed to provide the service, maintain access, and support account functionality. Shopify access sessions are handled server-side and are not exposed to the browser extension.

We do not sell personal data. We do not share user data except as needed to provide the service, process subscriptions, operate hosting and database infrastructure, comply with law, or protect Merceful and its users.

Service providers used to operate Merceful include Shopify for store access and subscription billing, Google and Supabase for optional website authentication, Supabase for database services, and Vercel for application hosting. These providers process information only as needed for their role in delivering the service and under their own applicable terms and privacy policies.

Merceful uses Google OAuth to let users sign in securely. Google user data is used only to provide app functionality, including account sign-in, account identification, and matching access to the correct Merceful user.

Merceful does not sell Google user data. Merceful does not share Google user data except as needed to provide and secure the service, comply with applicable law, or protect users.

You can stop using Merceful, disconnect the extension, or contact us to request help with access, correction, or deletion of account data. We retain account, store connection, and access records only while reasonably needed to operate and secure the service. Some records may need to be retained for billing, fraud prevention, legal, or operational reasons. Shopify store data is also removed when required by Shopify's mandatory redaction webhooks.

For privacy questions or support, contact us at support@merceful.com.