Security and your data
What PIDReady can see in your store, where it runs, what it keeps and for how long.
What PIDReady can access
PIDReady asks Shopify only for products and inventory, so it can read and save SKUs, barcodes, HS codes and countries of origin. It has no access to your customers or orders.
Where it runs
The app and its database run in Railway's EU West region, in Amsterdam. Error reports go to Sentry, in its EU data region. Support emails reach us through Namecheap's forwarding and Gmail.
How it is protected
Every connection uses HTTPS. Shopify access tokens are encrypted in our database (AES-256-GCM). Every page of the app is checked with Shopify before it opens, and every message from Shopify is checked for its signature before anything happens. Our logs never record your email address.
Your codes stay yours
Everything PIDReady fills in is saved in your own Shopify fields. It stays there if you uninstall.
What we keep, and for how long
| What | How long |
|---|---|
| Change history, which is what Undo uses | 30 days |
| Imported files waiting to be applied | 7 days |
| Catalogue scans | 90 days (the latest one is kept while PIDReady is installed) |
| Server logs | Up to 30 days |
| Error reports | Up to 90 days |
When you uninstall
Access ends at once and the access tokens are deleted. Shopify asks us to erase your store's data 48 hours later, and we delete everything we hold about it then. If that request never arrives, we delete it after 30 days anyway.
Questions or a security concern?
Email support@pidready.com. Full details are in our privacy policy.
Ready to check your store?
Install PIDReady free and see what is missing in your catalogue. Every fix is free, whatever the size of your store.