StoreArk Privacy Policy

The short version

StoreArk backs up store content — products, collections, pages, blog posts, navigation menus and theme settings. It does not read, store or transmit orders, customers, or any other personal data belonging to your shoppers. You can download everything StoreArk holds for you at any time, on any plan, and uninstalling deletes it.

What is stored

• Snapshots of the store content listed above, as returned by Shopify's Admin API.
• Your shop domain, the access token Shopify issues for the app, and your current plan.
• A log of backup and restore runs: when they ran, what changed, and any error message.

What is never stored

• Orders, checkouts, carts, and their contents.
• Customer records — names, addresses, emails, phone numbers, purchase history.
• Payment details of any kind. Billing is handled by Shopify.

StoreArk does not request the API scopes that would grant access to these, so it could not read them even if asked to.

Where it lives

Snapshots are held in a managed PostgreSQL database (Neon, AWS ap-southeast-1) and the application runs on Vercel. Data is encrypted in transit and at rest by those providers. Access is limited to the operator of CorbanWare.

How long it is kept

Version history is retained for the window your plan covers — 7 days on Free, 90 days on Pro, 365 days on Plus — after which older versions are deleted automatically. Uninstalling the app, or Shopify's shop redaction webhook, deletes everything held for your shop.

Your own copy

Every plan, including Free, has a one-click export of everything StoreArk holds for your store. There is no request process and no tenure requirement. On the Plus plan the same export can be written automatically to a Google Drive folder you own; StoreArk requests only the permission to write to that folder and never reads the rest of your Drive.

Third parties

Shopify (the platform and billing), Neon (database) and Vercel (hosting). No analytics, advertising, or data-broker services are used, and nothing is sold or shared for marketing.

Deletion and contact

Uninstalling deletes your data. To request deletion sooner, or to ask anything about this policy, write to support@corbanware.com. Requests are answered within one business day.