ChangeTrail privacy policy
Draft — last updated
This policy is a draft. ChangeTrail isn't available yet. This page describes what the app is planned to collect and will be finalised before launch.
Who we are
ChangeTrail is a Shopify app made by Elargo Solutions, a sole trader based in Australia (“we”, “us”). This policy explains what ChangeTrail collects when a merchant installs it, why, and what happens to that information.
Questions about privacy: support@elargosolutions.com
In short
- ChangeTrail records changes made in your Shopify admin so you can see what changed and when.
- It doesn't collect your customers' personal information.
- We don't sell data, and we don't use it for advertising.
- Your store's data is deleted after you uninstall the app.
What we collect
Store details
Your store's Shopify domain and name, your Shopify plan, your ChangeTrail plan and settings, and the access token Shopify gives the app so it can read your store data.
Store change history
For the parts of your store that ChangeTrail tracks, we keep a copy of their current values and a record of each change: what changed, when it changed, and the value before and after. This covers:
- products and variants, including prices
- inventory levels
- collections
- discounts
- themes
- online store content, such as pages and blog posts
ChangeTrail reads this data with read-only permissions. It doesn't change anything in your store.
Who made a change
Shopify keeps its own event records for some kinds of change. Where they're available, ChangeTrail uses them to show whether a change was made by a staff member, an app or Shopify, and how that was worked out. This can include an app's name, and a staff member's name and Shopify staff ID where Shopify provides them. We don't record the IP addresses of staff members.
Staff who use ChangeTrail
When someone on your team opens ChangeTrail in the Shopify admin, Shopify tells the app who they are so they can be signed in. This includes their Shopify user ID, name, email address, and whether they're the store owner.
Optional staff attribution (paid plans)
On paid plans you can choose to turn on staff attribution for inventory. If you do, you'll be asked to grant ChangeTrail one extra read-only permission to Shopify's reports. ChangeTrail then reads Shopify's inventory adjustment history to show which staff member or app adjusted stock, and stores that name with the change.
Shopify treats access to these reports as access to protected customer data. ChangeTrail only reads the staff member and app names on inventory adjustments. It doesn't request or store your customers' names, email addresses, postal addresses or orders. You can turn the feature off, or remove the permission in your Shopify admin, at any time.
Emails you send us
If you email us, we receive your email address, your message and anything you attach, and use them to reply.
Technical logs
To keep ChangeTrail running and fix problems, we keep logs and error reports. These may include your store's domain and details about the request that failed.
What we don't collect
- Your customers' personal information, such as names, email addresses or postal addresses.
- Orders or payment details. Billing for ChangeTrail is handled by Shopify.
- Anything about visitors to your online store. ChangeTrail adds no scripts to your storefront.
How we use it
We use this information only to:
- record, show, search and export your store's change history
- sign your staff in to the app
- apply the limits of your ChangeTrail plan
- answer support requests
- keep the service secure and fix problems
- meet our legal obligations
Who we share it with
We don't sell your data or share it for advertising. We use a small number of service providers to run ChangeTrail. They process data on our behalf and only to provide their service:
| Provider | What it does for ChangeTrail | Location |
|---|---|---|
| Google Cloud | Runs the app, receives store updates from Shopify, and stores older change history | United States |
| Neon | Database for recent change history, store details and settings | United States |
| Sentry | Error monitoring | United States |
| Cloudflare | Forwards email sent to our support address | Global network |
| Shopify | The platform ChangeTrail runs on, and billing | Global |
We may also disclose information if the law requires it, or to protect our rights or the safety of others.
Where your data is stored
ChangeTrail's data is stored in the United States, in Google Cloud and in a Neon database hosted on Amazon Web Services. We're based in Australia and may access the data from there to run and support the app.
How long we keep it
Change history is kept for the period included in your ChangeTrail plan:
- Free plan: 30 days
- Paid plans: 1 year or 3 years, depending on the plan
Changes older than your plan's period are deleted on a regular schedule. Store details, settings and the current copy of tracked data are kept while ChangeTrail is installed.
Uninstalling and deleting your data
When you uninstall ChangeTrail, it stops recording changes. Shopify then sends us a request to
erase your store's data (known as shop/redact) 48 hours after the uninstall. When
we receive it, we delete all of your store's data, including the change history and archived
history, within 30 days.
Shopify also passes on requests from your customers to see or erase their personal data
(customers/data_request and customers/redact). ChangeTrail doesn't
store customer personal information, so there's normally nothing to return or delete. We still
check each request and respond within 30 days.
While the app is installed, you can ask us to delete your store's data at any time by emailing support@elargosolutions.com from the store owner's email address.
How we protect it
Data is encrypted in transit and at rest. Access to production systems is limited to the developer and protected with multi-factor authentication, and test data is kept separate from live data. If a security incident affects your data, we'll tell you and take the steps the law requires.
Your choices and rights
Depending on where you live, you may have the right to ask for a copy of your personal information, to correct it, or to have it deleted. To make a request, email support@elargosolutions.com. If you're a staff member of a store that uses ChangeTrail, you can also contact the store owner, who controls their store's data in the app.
If you're not happy with how we've handled your information, please contact us first. You can also complain to your local privacy regulator, such as the Office of the Australian Information Commissioner.
Children
ChangeTrail is a business tool for Shopify merchants and isn't intended for children.
Changes to this policy
When we update this policy we'll change the date at the top of this page. If a change is significant, we'll also let merchants know in the app or by email.
Contact
Email support@elargosolutions.com with any privacy question or request.