X SHIELD - STORE GUARD PRIVACY POLICY

Last Updated: January 2025

1. INTRODUCTION

X Shield - Store Guard ("we," "us," or "our") provides security services for
Shopify merchants. This Privacy Policy explains how we handle information in
compliance with privacy regulations and Shopify's requirements. By using our
app, you agree to this policy.

2. INFORMATION WE COLLECT AND HOW WE USE IT

We collect only the minimum data necessary to provide our security features.
We do not collect personally identifiable information (PII) like names or email
addresses for our core security services.

- Merchant Information: We collect your Shopify store details and configuration
  settings to operate the app and provide support.
- Visitor & Technical Data: We analyze IP addresses, location data
  (country/region), and browser/device information to perform security checks.

This data is used exclusively for:
- Security Services: Operating our features, such as geographic access control,
  IP blocking, bot/VPN detection, and content protection.
- Automated Decision-Making: Our systems automatically use this data to identify
  threats and apply security rules (e.g., blocking or redirecting a visitor).
  If you believe you have been incorrectly blocked, please contact the store
  owner or our support.
- Service Improvement: Analyzing usage to enhance our security features and user
  experience.

3. DATA SECURITY AND RETENTION

- Security Measures: We protect your data with industry-standard security
  practices, including TLS encryption for data in transit and AES-256 encryption
  for data at rest. Access to data is strictly limited to authorized personnel.

- Data Retention:
  - App Configuration Data: All merchant-specific settings and data are
    permanently deleted within 48 hours of you uninstalling the app.
  - Security Logs: Retained for 90 days for threat analysis.
  - Support Communications: Retained for 2 years.
  - Anonymized Analytics: May be retained indefinitely for statistical purposes.

4. INFORMATION SHARING

We do not sell your data. We only share information with:
- Essential Service Providers: Such as cloud hosting services, who are bound by
  strict data protection agreements.
- Legal Obligations: If required by law or to protect our rights and the safety
  of others.

5. YOUR RIGHTS AND RESPONSIBILITIES

- Merchant Responsibilities: You are responsible for complying with privacy laws,
  informing your customers about your use of our app, and maintaining a legal
- Your Rights: You have the right to access, correct, or request the deletion
  of your personal information. To exercise these rights, please contact us.

6. OTHER IMPORTANT INFORMATION

- International Data Transfers: We use standard contractual clauses and other
  legal safeguards for international data transfers.
- Children's Privacy: Our service is not intended for children under 13.
- Policy Updates: We will notify you of any material changes to this policy
  through the app dashboard.

7. CONTACT US

If you have any questions about this Privacy Policy, please contact us:
- Email: privacy@afixer.app
- Website: https://b2b-xshield.afixer.app/

END OF PRIVACY POLICY