Privacy

Get My Store Upgraded, operated by Apex Growth Investments LLC, decides what is collected here and why — the data controller, if you are asking in those terms. Everything in this policy is something that company does or does not do.

Requests about your own data — a copy of it, deletion of it, or an objection to a use of it — go to andrew@getmystoreupgraded.com. One person reads that inbox and answers them by hand.

The store address you type. We fetch the public pages at that address — the same pages Google fetches — and read them. The scanner does not sign in, is not given admin access, and changes nothing.

Admin access, only if you connect your store. Connecting is a separate, optional step you take from the dashboard, through Shopify's own approval screen. It grants read and write access to your products and nothing else — no orders, customers, payouts or analytics. We use the write half only when you have read a specific proposed change and pressed approve on it. You can revoke it at any time by removing the app in Shopify, or by disconnecting here.

Your email address, if you enter one. Two places ask for it: the point in the report where you can unlock the rest, and the offer at the end where you can ask us to do the writing for you. Both are optional and the first one has a visible way past it.

Your note, if you write one. The optional box on the offer form. Don't put anything confidential in it.

When you submit an email we store it with the store domain you scanned, the score that scan produced, whether you asked for the report or for the done-for-you work, your note, and how you arrived — a referring site, or the utm_source, utm_medium and utm_campaign values in the link you clicked, if there were any.

Separately, the site counts events: a page was viewed, a scan started, a scan finished, an issue was expanded, someone asked for a fix. These carry the store domain, the score, the page path and the same arrival information. They do not carry your email address, and they use no fingerprint and no cookie of ours. They are grouped by a random number your browser generates and keeps until the tab closes, so a sequence of pages can be read as one visit. It is never reused, is not linked to you or to anything outside that table, and means we cannot tell a returning visitor from a new one. Three of those events are also reported to Facebook by the advertising pixel, which does use cookies; that is set out in full under Cookies below.

Our host passes your IP address to the server with every request. We use it for one thing: counting scans so a single visitor can't start dozens at once. That count lives in the memory of the running server, is never written to a file or a database, is never sent anywhere, and disappears when the server restarts — which happens constantly on this kind of hosting.

Our host, Vercel, keeps its own request logs for its own operational purposes. That is outside our control and is covered by their privacy policy.

Leads and events are sent to a Google Sheet we own, through a Google Apps Script web app. That means Google processes this data as our hosting provider. There is no CRM and no analytics company involved. The only other place any of it goes is Facebook, and only the three events named under Cookies below.

We do keep one database, and here is exactly what is in it. It holds the results of scans — the store domain, the score, and the findings — so that scanning the same store again can tell you what changed since last time, and so your dashboard can draw a score over time. For a connected store it also holds the daily score and a list of the fields we wrote for you: the product, the field and the time, never the text.

What is deliberately not in it: your Shopify token. Which of two things happens to it depends on where you opened StoreFix, and neither of them is us keeping it. Opened from inside your Shopify admin, the app asks Shopify for a fresh token each time a page loads and throws it away when that page finishes. Opened as its own site, the token stays encrypted in your own browser. Either way nothing we run can reach into your store while you are away, and disconnecting is immediate. A database holding observations we made about a storefront and a database holding keys to other people's shops are different things, and we only keep the first.

The site itself is hosted on Vercel. The fonts are bundled with the site when it is built, so your browser never makes a request to Google Fonts.

One thing is kept in your own browser: a small record of how you first arrived, in session storage. It is erased when you close the tab, it is not a cookie, and it never leaves your browser unless you submit a form.

This site runs the Meta (Facebook) advertising pixel. It loads a script from Facebook and sets two cookies of theirs, _fbp and, if you arrived from a Facebook ad, _fbc. They are how Facebook knows their ad led to a visit. Your browser's tracking protection and an ad blocker both stop them, and nothing on this site breaks if you do.

If you are in the UK, the EEA or Switzerland, none of that happens. The pixel is not loaded at all for visitors from those countries — not loaded and then restrained, but never requested — so no Facebook script runs and neither cookie is set. We would have to ask your permission first, and we would rather not measure you than put a consent box in front of you.

Exactly three things are reported to Facebook: that a scan was started, that a finished scan reached the price, and that someone went to Stripe. Not the store address you typed, not your score, not your email, not which findings you read. The store domain is the one thing on this site that identifies a merchant, and it is not sent.

Our own counting is unchanged and is separate from that: no visitor ID, no fingerprint, no cookie, and it goes to us rather than to an advertising network.

Connecting a Shopify store sets three cookies of ours. All three are encrypted, marked HttpOnly so no script can read them, and scoped to this site only.

Clearing your cookies deletes all three and logs you out of nothing else, because there is nothing else. Disconnecting your store from the dashboard deletes the first two outright, and deletes your connected store's score history and change log from our database in the same moment — not on a queue, and not overnight.

To be exact, because "deletes your history" would be too generous a summary: what disconnecting removes is everything we recorded using your token — the daily catalogue readings and the list of fields we wrote. The scores from public scans of your storefront are kept separately, against the domain rather than against you, and disconnecting does not remove those, because they were never yours alone; anyone can run that scan without your permission and some of those readings will not have been yours. Email us and we will delete them too.

We use it to write to you about the store you scanned. That is the only use.

To be exact about what happens today: nothing is sent automatically. There is no mailing list, no sequence, and no unsubscribe link, because there is nothing to unsubscribe from. A person reads the sheet and replies. If that ever changes — if we add a newsletter or any automated mail — this page and the form that collected your address will say so before it does, and the mail will carry an unsubscribe link.

We do not sell, rent, share or trade your address with anyone.

A report link like /r/yourstore.com is public: it contains a store domain, and anyone who has the link can open it and see the findings for that store. It only ever shows information already published on that store's own public pages. It does not contain your email address or anything else about you.

Opening one runs the scan again from scratch, which is why two people opening the same link a month apart can see different scores.

It also shows the scores from previous scans of that store, as a line. Those readings are kept against the store domain, not against a person, so the chart includes scans run by anyone — if a supplier and a competitor both scanned the store last week, both readings are on it. Every point is a score we calculated from that store's own public pages, which anyone could have looked at themselves. We would rather you knew that before you sent the link to someone.

Email andrew@getmystoreupgraded.com from the address you gave us and we will delete the row and confirm. No form, no account, no waiting period. Ask us what we hold on you and we will send you the row itself.

StoreFix is a tool for people who run shops. It is not directed at children and we do not knowingly collect anything from anyone under 13.

If this page changes, the date at the top changes with it. Material changes to what we collect or what we do with it will be described here rather than quietly swapped in.

StoreFix is run by one person. See the about page for who that is, or write to andrew@getmystoreupgraded.com.