Privacy Policy

Last updated: March 15, 2026

1. Introduction

TokGuard ("we", "us", "our") operates TokGuard, a Shopify application that helps merchants verify Safety Data Sheet (SDS) compliance for TikTok Shop listings. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

From Shopify:

Store name, domain, and contact information (via Shopify OAuth)
Product catalog data (titles, images, media) synced from your Shopify store
Billing and subscription status

From You:

Safety Data Sheet (SDS) PDF documents that you upload for compliance auditing

3. How We Use Your Information

To display your product catalog within the app
To perform AI-powered SDS compliance audits using Google Gemini
To store audit results, compliance status, and tags on your Shopify products
To upload SDS documents to your Shopify Files CDN
To manage your subscription and billing through Shopify
To generate CSV compliance reports for your records

Important Disclosure:

When you upload an SDS document, the PDF content is sent to Google's Gemini API for automated compliance analysis. This includes the document text and your product title for name-matching verification. Google processes this data according to their API Terms of Service. We do not send any personal customer data, payment information, or order data to Google. For more information, see Google's Generative AI API Terms of Service.

4. Cookies & Session Tokens

This app uses Shopify session tokens solely for authentication and authorization purposes. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. No personal browsing data is collected or shared with advertisers.

5. Data Storage & Security

All app data is stored securely on Gadget.dev's infrastructure (Google Cloud)
SDS documents are stored in Gadget's managed cloud storage and optionally copied to your Shopify Files CDN
All data transmission occurs over HTTPS encryption
Access to your data is restricted to your authenticated Shopify store session

6. Data Sharing

We do not sell, trade, or rent your information to third parties. Your data is only shared with:

Google Gemini API — for SDS document analysis (PDF content and product title only)
Shopify — to sync tags, metafields, and files back to your store
Gadget.dev — our hosting platform that stores and processes app data

7. Data Retention

We retain your SDS documents and audit results for as long as you have the app installed. When you uninstall TokGuard, your data will be deleted within 30 days. You may delete individual SDS documents at any time through the app interface.

8. GDPR & Your Rights

You have the right to access, delete, or request a portable copy of your data. We comply with Shopify's mandatory GDPR webhooks for customer data requests and erasure.

9. California Privacy Rights (CCPA)

We do not sell personal information. California residents may exercise their rights to know and delete personal information by contacting us at support@tokguard.com.

10. Data Breach Notification

In the event of a data breach affecting your information, we will notify affected merchants via their Shopify store contact email within 72 hours of discovery.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: support@tokguard.com