SafeChange Preflight
Privacy Policy
Effective September 20, 2026
What SafeChange accesses
SafeChange requests read-only product access from Shopify so it can compare the connected catalog with a Shopify product CSV selected by the merchant. The app does not request customer or order scopes.
CSV processing
Product CSV files selected for preflight are read and analyzed in the merchant's browser session. SafeChange does not upload or store the selected CSV file on its application server.
Shopify catalog data
SafeChange reads product and variant information needed for the preflight comparison, including identifiers, product status, options, SKU and barcode values, pricing fields, and selected product fields. Current catalog data is used to produce the requested preflight report.
Account and session data
SafeChange stores Shopify authentication and session information needed to operate the installed app. Shopify sessions can include the shop domain and, for online sessions, Shopify user account information supplied as part of authentication.
Retention and deletion
SafeChange deletes stored Shopify session records when the app is uninstalled and when Shopify sends the applicable shop-redaction request. Because SafeChange does not request customer data access or store customer records, customer data access and redaction requests do not require deletion of SafeChange customer records.
Sharing and sale of data
SafeChange does not sell merchant or customer personal information and does not use catalog data for advertising. Information can be processed by Shopify and infrastructure providers as needed to authenticate, host, secure, and operate the app.
Security
SafeChange limits Shopify access to the scopes required for its current functionality and verifies signed Shopify webhook requests before processing them.
Contact
For privacy questions or requests, use the SafeChange support channel available through Shopify or visit the SafeChange support page.
Changes to this policy
This policy can be updated when SafeChange's features, data practices, or legal obligations change. The effective date above will be updated when material revisions are published.