Privacy Policy

Last updated: October 4, 2026

ShopMCP operates the ShopMCP Shopify app and shopmcp.app. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you install ShopMCP, we collect and store:

• Shop data: Your shop domain, Shopify access tokens, and session information required to authenticate API requests.
• Connection data: Connection names, configured permissions, and hashed API keys.
• Audit logs: MCP tool names, timestamps, status codes, and whether requests were blocked. We do not include request or response payloads in audit logs.
• Voluntary support reports: Only when your AI client submits a report after asking for your approval, we store its technical summary, your shop domain and connection ID, timestamps, status and the client-declared approval. We do not automatically upload failed tool inputs, logs or conversations. Known secret and contact patterns are redacted, but this cannot detect all personal information. Please review the report before approving it.
• Usage and preferences: Request totals, successful usage days, review-prompt preferences, connection policies and skill settings. Daily hashed operation fingerprints prevent duplicate success counts. Hashed source-IP buckets limit OAuth client registrations.
• Archived theme backups: Existing archived theme asset content may be stored for download. ShopMCP does not create new backups through theme editing or restore theme files.

2. How We Use Your Data

• To authenticate and process MCP requests from connected AI tools on your behalf.
• To enforce the permissions configured for each connection.
• To display connection activity and existing theme backup archives.
• To investigate the bugs, missing capabilities and setup problems you choose to report to ShopMCP support. Reports are stored in our app database, not automatically published or forwarded to third-party issue trackers.
• To send service messages about ShopMCP to the store's contact email as provided by Shopify, such as important changes or an occasional request for feedback. You can opt out at any time by replying to such a message or by contacting support.
• To comply with legal obligations, including Shopify privacy webhook requirements.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Retention

• For each connection, we retain at most the 500 most recent audit log entries; older entries are deleted as new entries are recorded.
• Existing archived theme backups remain available for export and are removed with the associated shop data. Contact support to request earlier deletion.
• Uninstallation revokes app access. Shop-scoped records are deleted when Shopify delivers the shop/redact webhook.
• Daily operation fingerprints are pruned on subsequent shop activity. Expired registration-limit buckets are pruned as new client registrations are processed.
• Support reports have a 30-day retention window. Expired records are deleted on later reporting activity or when the operator runs the cleanup command; there is no guaranteed daily cleanup job. Deleting the connection or shop data also deletes its reports. Contact support with a report ID to request earlier deletion.

4. Third-Party Services

ShopMCP is hosted on Fly.io. Data is stored on Fly.io infrastructure. We use Shopify's API to access your store, subject to Shopify's privacy terms.

5. Security

ShopMCP API keys and OAuth tokens are stored as SHA-256 hashes. Shopify access tokens must remain retrievable by the application to perform authorized API calls and are stored in server-side session records. They are never sent to connected AI clients. Connections use HTTPS.

6. Your Rights

If you are in the European Economic Area, you may request access, correction, deletion, or restriction of your personal data, or object to its processing. Contact us below to exercise these rights.

7. Customer Data

ShopMCP may process customer names, email addresses, order information, and other store data when a connected AI tool requests an operation. Configured permissions govern this access. Structured customer, contact, and address fields are redacted from MCP responses where applicable; free-form content may still contain personal information. We do not use customer data for purposes beyond fulfilling the requested operation.

Shop data is removed following Shopify's applicable privacy webhooks. To exercise a customer privacy request, the merchant should use Shopify's customer privacy tools or contact us.

8. Changes to This Policy

We may update this policy. Significant changes will be reflected by updating the date at the top of this page.

9. Contact

Questions about this policy or your data? Contact support@shopmcp.app.