Privacy policy

What we collect. Product catalog data from the store you connect (titles, descriptions, prices, stock, images, identifiers), the store's domain, and the addresses of any sheets you point us at. For your account: your email, your team members' emails, whether two-step sign-in is on, and a log of who changed what, kept for a year. That's what the service exists to process.

What we deliberately don't collect. No customer data from your store — no names, emails, addresses, or orders. Our Shopify app requests read access to products, inventory, markets and translations only — nothing that holds a customer.

How we use it. Your catalog data is used solely to generate and serve your product feeds and quality reports. We don't sell it, share it with third parties for their own purposes, or use it for advertising.

Where it lives. Data is stored with our hosting provider (Railway) in the EU West region, in Amsterdam, and served over HTTPS. Feed URLs contain an unguessable token; treat them like a password for your catalog.

Your data, self-service. From your Account page you can download everything we hold about you as JSON ("Download my data") and delete your account entirely — deletion stops your feeds, cancels billing and removes your stores, products and login immediately.

Deletion. Uninstalling the Shopify app revokes our access immediately; catalog data is deleted following Shopify's redaction schedule (within 48 hours of the redaction request). For URL-connected stores, remove the store (or delete your account) from the Account page — or contact us and we delete everything for you.

The free feed check fetches the URL you submit once, computes the report in memory, and does not store your products. We keep an anonymous usage record of each check (the feed's domain name, the score, and how you found the tool) — never the products themselves.

If you ask us to email you a feed check, we keep the address you typed, the feed's domain name, the score and whether you also agreed to hear from us again — nothing from inside your feed goes into that email. Ticking nothing means one email and no more. If you did tick the box, reply to any of our emails (or write to contact@feedrobin.com) and we delete your address.

Site analytics. We measure website traffic with Google Analytics. No analytics cookies are set unless you allow them via the consent banner — which we show to every visitor, not only where the law requires it. Declining (or ignoring it) keeps your visit cookieless, and you can change or withdraw your choice at any time via the "Cookie settings" link in the footer. In all cases the Google Analytics data we see is aggregated.

If you ask us to watch a feed, we keep the address you typed and the feed's full URL, because repeating a check needs the exact file and telling you it broke needs somewhere to write. This is the one part of the free check that is not anonymous, and it only exists because you asked for it: nothing runs until you click the link in the confirmation email, and a request nobody confirms is deleted two days later. After that we check the feed once a week and write only when the answer changed. One click in any of those emails ends it, and writing to contact@feedrobin.com deletes the record.

How it is protected, and who else processes it. Where the data runs, what is encrypted at rest, and the five companies that process anything on our behalf are set out on the data security page. The Article 28 terms, with the subprocessor list, are in the data processing agreement — it applies to every account automatically and there is nothing to sign.

Advertising measurement. We run ads on ChatGPT, and a measurement pixel from OpenAI tells us which of them led to something — a feed check, a report emailed, an account opened, a subscription started. It is subject to the same consent as analytics: nothing is set or sent until you allow it via the banner, wherever you are, and withdrawing consent deletes its cookies along with the analytics ones. We report the conversions that carry an email address (a report you asked us to send you, an account you opened) from our servers rather than from your browser, and the address is SHA-256 hashed before it leaves us — OpenAI receives the hash, never the address. The pixel also has OpenAI's automatic advanced matching enabled, which means that if you type an email address into a form on this site it may be hashed in your browser and sent with the event in the same form. It never sees anything from inside your product feed, and it is not active on the signed-in dashboard.

Cookies we use.

• Strictly necessary — required for the service to work, always on: pf_session (keeps you signed in; 30 days), pf_shop (remembers which store's dashboard you're viewing; 1 year), pf_claim (links a newly installed Shopify store to the account you create; 24 hours), shopify_oauth_state (protects the Shopify connection against request forgery; 10 minutes), pf_mfa (finishes a two-step sign-in; 10 minutes), fr_from (remembers that you came from the free feed check; 7 days), fr_source (remembers a store handed over by the WordPress plugin; 7 days). All first-party.
• Analytics — optional; set only with your consent, wherever you are: _ga and _ga_XPYR7CG3BZ (Google Analytics; distinguish visitors and sessions; up to 2 years).
• Advertising — optional, and on the same consent as analytics: __obref (OpenAI; the reference that connects a conversion back to the ad that led to it; 1 year) and __oaiq_consent (records whether you allowed the pixel at all, so it stays off until you say otherwise; 30 days). Both first-party.
• Preferences — your cookie choice itself is kept in the browser's local storage (fr-consent), not in a cookie, and never leaves your device.

Nothing here tracks you across other websites. Payment pages run on Stripe's own domain and subscription billing for App Store installs on Shopify's — any cookies set there are governed by their respective policies.

For merchants (B2B). For the catalog data of the store you connect, FeedRobin acts as a data processor on your behalf: we process it only to generate and serve your feeds, on your instructions. A data processing agreement (DPA) is published at /dpa. It applies to every account automatically; there is nothing to sign.

Contact. Questions about your data: contact@feedrobin.com.