Privacy Policy

Last updated: 13 March 2026

1. Data Controller

AppCanary is operated by a sole trader (OSVČ) registered in the Czech Republic. For any data-related inquiries, contact us at hello@appcanary.app.

2. What Data We Collect

  • Account data: email address and authentication identifiers provided when you sign up via Clerk.
  • App monitoring data: Shopify app slugs you choose to monitor, along with publicly available rating and review data scraped from the Shopify App Store.
  • Payment data: handled entirely by Stripe. We store only a Stripe customer ID — we never see or store your card details.
  • Usage data: alert history, notification preferences, and Slack webhook URLs you optionally provide.

3. Why We Collect It

  • To provide the monitoring and alerting service you signed up for.
  • To send you alert emails when your app ratings change.
  • To process subscription payments.
  • To improve and maintain the service.

Legal basis under GDPR: performance of a contract (Art. 6(1)(b)) and legitimate interest in maintaining service quality (Art. 6(1)(f)).

4. Data Retention

Rating snapshots are retained for 90 days and then automatically deleted. Account data is kept for as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days.

5. Third-Party Processors

We use the following third-party services to operate AppCanary. All processors are bound by data processing agreements:

  • Clerk (USA) — authentication and user management.
  • Stripe (USA) — payment processing and subscription management.
  • Brevo (France) — transactional alert emails.
  • Neon (AWS eu-west-2, London) — database hosting. Your data is stored in the EU.

6. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a structured format.
  • Lodge a complaint with a supervisory authority (in the Czech Republic: ÚOOÚ).

To exercise any of these rights, email hello@appcanary.app. We will respond within 30 days.

7. Cookies

AppCanary uses only essential cookies required for authentication (set by Clerk). We do not use analytics or advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the service after changes constitutes acceptance.