DropOps Desk ("Desk", "we") is a Shopify app that checks competitor prices for a merchant's products and suggests prices. This policy explains what data the app accesses, stores and shares. We don't request access to orders or customers, and we don't collect personal data about your customers.
What we access through Shopify
Products and variants (read_products): titles, SKUs, barcodes, prices, inventory counts, images and each variant's unit cost if you've set one in Shopify, used to look up competitor prices, build price suggestions and start your margin floor.
Product price updates (write_products): used only to write the prices you approve, or that Autopilot applies if you turn it on yourself (Growth plan and up). Scheduled price checks never change your prices.
Store contact email: your shop's contact email from Shopify, used to send the daily price alert and weekly report emails.
Subscription status: your plan and trial status from Shopify Billing.
What we store
Server data is stored in Google Cloud Firestore (Firebase), in one record per shop. Browsers can't read it directly.
Your shop domain, the Shopify access and refresh tokens (with their expiry times) and the scopes you granted.
Your subscription status and plan.
A copy of your synced product catalog (titles, SKUs, barcodes, prices, inventory counts, image links and Shopify unit costs where set).
Product costs you enter in Desk, saved per product variant so they are kept through catalog syncs and used for your margin floor, price alerts and the server's check on every price change.
Your settings: margin floor, whether Autopilot is on or off, email on/off preferences, an optional alert recipient email address, your store contact email, and products you mark as "Not the same product".
Competitor prices found for your products, with up to the last 90 price checks per product for history charts.
When a price is sent to Shopify (approved by you or by Autopilot), our server checks it against your stored cost and margin floor and refuses any price below the floor, including custom prices.
In your browser only: display preferences (such as theme and plan view) and a working copy of your catalog are saved in your browser's local storage on your device.
Where competitor prices come from
Competitor prices come from Google Shopping search results, including listings from sellers such as eBay, Amazon and Walmart that appear there. We don't log in to, scrape or connect to those marketplaces directly. Which sellers you see depends on your plan.
Service providers
Shopify: app installation, authentication and billing.
Google Firebase / Cloud Firestore: data storage.
SerpApi: we send product titles to SerpApi to get Google Shopping results. No customer data is sent.
Resend: delivers the price alert and weekly report emails (recipient address and email content).
Render: app hosting.
Google Gemini API: when you run a price evaluation, product titles, prices, supplier costs and competitor prices may be sent to generate price suggestions.
We don't sell or rent your data, and we don't use third-party scraping or proxy services.
Emails
The daily price alert is sent only when a product has a warning. The weekly report is a summary. Each email type can be turned off in Settings, and every email has an unsubscribe link.
Retention and deletion
Uninstall (app/uninstalled): we delete the stored access and refresh tokens, mark the shop as uninstalled and stop price checks and emails. The rest of your shop's data is kept until Shopify sends its shop deletion request.
Shop deletion (shop/redact): Shopify sends this about 48 hours after uninstall. We then delete everything stored for your shop, including the catalog copy, product costs, settings, saved competitor prices and price history.
Customer requests (customers/data_request, customers/redact): we store no customer data, so these requests are logged and acknowledged and there is nothing to export or delete.
Google Shopping results are also cached in server memory for up to 6 hours, keyed by product title and not linked to your shop.
Webhooks are verified with Shopify's HMAC signature, and all data is sent over HTTPS.
Your rights
To access, correct or delete your data, email support.dropopsdesk@gmail.com. We'll respond within 30 days.
Changes
We'll update this page and the effective date when this policy changes.