Privacy

Last updated September 29, 2026

This page covers the ShopAccess website and ShopAccess for Shopify, the app merchants install from their Shopify admin.

What we store

• Your email address.
• A hash of your password. We never store the password itself and cannot see it.
• The websites you add and the results of each scan, including the bits of page code where we found issues.
• Your accessibility statement answers, if you use the statement generator.
• Your company name and logo, if you set up white label reports.
• Your plan and a Stripe customer ID if you pay for a plan.

When you scan a site without an account, we store the scan results and a short record of your IP address to limit how many scans can run each hour.

Payments

We use Stripe for payments. Your card details go straight to Stripe. We never see or store your card number. Stripe keeps its own records of payments, as the law requires.

Email

We send account emails, like a welcome email and plan changes. Paid plans also get a weekly scan summary, which you can turn off on your account page. We send email through Resend.

Cookies

We use one cookie to keep you logged in. We do not use advertising or tracking cookies, and we do not sell your information. Your dark mode choice is saved in your own browser.

Deleting your account

You can delete your account at any time from your account page. This removes your account, your sites, all of your scans and reports, your statements, and your logo. If you have a paid plan, it is canceled right away.

ShopAccess for Shopify

When you install ShopAccess on your Shopify store, it can only read. It never changes your store.

What ShopAccess reads from Shopify

• Your published products and collections, and your online store pages, to build the list of pages to scan.
• Your store's primary web address, so scans visit what your customers see.
• Your store's contact email, for the weekly scan summary on paid plans.
• Your ShopAccess plan and whether your store is a development store, to handle billing.

ShopAccess then visits those pages in a browser, like a shopper would, and checks them for accessibility issues.

What ShopAccess stores

• Your store's myshopify.com address and the access token Shopify gives ShopAccess.
• Scan results: the pages scanned, their scores, and the bits of page code where issues were found.
• Your plan, your Shopify subscription ID, your store's contact email, and whether you want weekly emails.
• Your accessibility statement answers, if you use the statement generator on the Pro plan.

What ShopAccess never stores

• Customer data of any kind. ShopAccess does not read your customers or orders.
• Your storefront password. If your store is password protected, ShopAccess uses the password you enter for that one scan and then forgets it.

Payments, cookies, and email

Paid plans are charged by Shopify on your Shopify bill. ShopAccess never sees your payment details. Inside your Shopify admin, ShopAccess uses Shopify's session tokens and sets no cookies. Weekly summaries are sent through Resend and can be turned off in Manage plan.

When you uninstall

ShopAccess deletes its access token as soon as you uninstall. Everything else it stores about your store is kept for 48 hours, so your history is still there if you reinstall, and then deleted. That includes your scans, scores, page code, statements, and PDF reports. If Shopify asks us to delete your store's data sooner, we do it right away.

Questions

Email support@shopaccess.app, or reply to any email from ShopAccess, and a person will get back to you. See also the support page.