Privacy Policy

Last updated: July 2026

What AppDrain Does

AppDrain is a Shopify app that helps merchants identify duplicate apps, forgotten subscriptions, and unnecessary app costs. We perform a read-only audit of your installed Shopify apps.

Data We Collect

• Your Shopify store domain (e.g. your-store.myshopify.com)
• List of apps installed on your store (names, pricing information)
• OAuth access token (encrypted at rest using AES-256-GCM)
• Basic usage analytics (page views, scan events) — no personal data

Data We Do NOT Collect

• Customer names, emails, or contact information
• Order history or transaction data
• Product inventory or pricing
• Payment or financial data

Read-Only Access

AppDrain requests read-only Shopify permissions. We never modify your store, add or remove apps, or make any changes to your Shopify account. Our OAuth scopes are limited to reading installed app information.

Data Storage

Your data is stored securely on Railway infrastructure in the US. Access tokens are encrypted before storage. We do not sell or share your data with third parties.

Data Retention

We retain your store data while you have AppDrain installed. If you uninstall AppDrain, your store data is marked inactive. You may request full deletion at any time by emailing support@appdrain.com.

GDPR Rights

If you are in the European Economic Area, you have the right to access, correct, or delete your personal data. Contact us at support@appdrain.com to exercise these rights.

Shopify Data Processing

AppDrain processes data as a Shopify partner in accordance with Shopify's Privacy Policy. We respond to Shopify's mandatory GDPR webhook events for customer data requests and deletion.

Contact

Questions about this policy? Email us at support@appdrain.com