Privacy policy
Who operates App Spend Guard
Elektraset, s.r.o. operates App Spend Guard. Contact help@elektraset.com or visit https://elektraset.com/. Effective date: 19 October 2026.
Information we process
We process your Shopify shop domain and identifier, installation status, development-store status, subscription entitlements, uploaded or pasted app charge lines, entered app lifecycle dates, expected prices, owners, notes and review decisions. If enabled, we process a reminder email address. We do not request order, shopper, payment-card or customer profile access. Please remove unrelated personal and payment information before importing.
Purpose and legal basis
We process merchant data to provide the requested reconciliation, export and reminder service and administer subscriptions (performance of our agreement), maintain security and aggregated service measurement (legitimate interests), and meet legal obligations. Merchants are responsible for having authority to upload their data. Optional reminders can be disabled at any time. We do not sell data or use it for advertising.
Storage and service providers
App data and authentication sessions are stored on our app-host infrastructure using a persistent database. Shopify provides authentication, app billing and subscription information. When enabled, our configured SMTP provider processes the reminder address and a summary email. The SMTP provider and location are not finalized; email reminders stay disabled until configured and tested. These parties process data to deliver the service. We do not automatically send evidence packets to vendors.
Retention and deletion
Keep imported data while using the service, or delete it in Settings at any time. Deletion removes the app ledger, charge lines, review and activity history and reminder settings. Uninstall stops reminders and deletes access sessions. Shopify’s shop/redact notification triggers full removal of the remaining shop account and related records. Requests made sooner can be sent to support. We do not retain copies of uploaded original CSV files outside their imported mapped rows. Infrastructure backups, if introduced, will require a documented retention policy before production launch.
Security and transfers
HTTPS protects data in transit. Store-scoped authentication and queries restrict access; app secrets are stored outside source control. We limit operational access and do not log uploaded data or authentication tokens. Shopify and infrastructure providers may process data in other countries. Where required, we use appropriate contractual transfer safeguards before production processing.
Your choices and rights
Contact help@elektraset.com to request access, correction, export or deletion, to object to or restrict processing, or to raise a privacy concern. We verify store ownership before disclosing account data. You may complain to your local data protection authority. The app has no advertising cookies; required authentication/session storage supports sign-in.
Changes
We update this page when practices change. Material changes will be communicated through the app or your account contact. This app is for business merchants, not children.