Privacy Policy

Information we process

We process the merchant’s shop domain, Shopify installation and session details, the product and variant identifiers selected for monitoring, monitoring settings, alert destinations, and service communications.

Monitoring produces structured check results, timing data, diagnostic logs, and limited evidence needed to explain a failure. Pathvilo is designed to avoid customer records, order records, payment details, and checkout form contents. An optional merchant product-subscription backend is disabled in the submitted app; it cannot be enabled until its customer access and redaction workflow is separately approved.

How we use information

We use this information to authenticate the shop, run the monitoring service, send requested alerts, investigate incidents, provide support, protect the service, and meet legal obligations. We do not sell merchant or customer data.

Service providers and disclosure

We may use hosting, managed database, transactional email delivery, and observability providers as processors. They receive only the information needed to provide their service. We may also disclose information when required by law or to protect merchants, Pathvilo, or the public from fraud or harm.

Retention and security

We retain account and configuration data while the app is installed. Depending on the selected plan, failure screenshots are kept for 7, 30, or 60 days; completed run details for 14, 60, or 180 days; and resolved incident summaries for 90, 365, or 730 days. Open incidents remain available until they are resolved or the app is uninstalled. Webhook delivery receipts contain an event ID, shop domain, topic, and timestamps; receipts attributable to a shop are deleted during verified uninstall or redaction, and any legacy non-identifying receipts are scheduled for deletion after 30 days.

After a verified uninstall or shop-redaction request, Pathvilo deletes active sessions and the shop’s tenant records from the active application database. Deletion may not immediately remove transient copies in infrastructure logs, caches, or provider-managed system records. Any residual copies are restricted from normal use and removed or overwritten under the applicable provider’s standard retention process. We use access controls, encryption in transit, and data minimization to protect stored information.

Evidence may contain information visible on a public storefront. Pathvilo limits collection, removes sensitive URL values, and stores screenshots only when a safe redaction policy can be applied.

Your choices

You can change monitoring and notification settings in the app. You may uninstall Pathvilo to stop new collection and contact support to request access, correction, or deletion where applicable.

Contact

For privacy questions or requests, visit the Pathvilo support page. We may update this policy as the service changes and will post the revised date here.