Privacy Policy

• Account data: your email address and a hashed password.
• Store data: the store URLs you connect, plan and schedule settings, and the alert channels (email addresses and webhook URLs) you configure.
• Run data: results of each check — step outcomes, timings, health scores, console and network errors observed, per-step screenshots, and a signed cleanup receipt.
• Free-scan data: for the public scanner, the target URL and a one-way hash of the requesting IP address, used only for rate limiting and abuse prevention.
• Operational logs: standard server logs needed to run and secure the service.

We do not collect your shoppers' personal data. Checks use synthetic test details, and test orders are deleted after each run. The connector stores an encrypted signing secret and never transmits your customers' information to us.

To run checks and show you results, to send the alerts you configure, to enforce plan limits and prevent abuse, to bill paid plans, and to maintain and secure the service. We do not sell personal data and do not use it for advertising.

We share data only with processors needed to operate the service — for example, cloud hosting and database infrastructure, our email-sending provider for alerts and account mail (Resend), and, when you subscribe to a paid plan, Stripe. Stripe is the merchant of record for your purchase: your card details are entered directly on Stripe's secure checkout and are never seen or stored by us. These providers process data on our behalf under their own terms; we never send them your shoppers' data.

We keep account and store data for as long as your account is active. Run history and evidence are retained according to your plan and then may be removed. You can delete a store (and its history) from the dashboard at any time, and request deletion of your account by contacting us.

Store signing secrets are encrypted at rest (AES-256-GCM). Runner requests are signed and single-use to prevent replay. Passwords are hashed. Access to production data is limited to what is needed to operate the service. No system is perfectly secure, but we work to protect your data.

You can access and update your data in the dashboard, edit or remove alert recipients, disconnect stores, and request export or deletion of your account data. Depending on where you live, you may have additional rights under laws such as GDPR or CCPA; contact us to exercise them.

We use a single essential cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

We may update this policy; material changes will be posted here with a new date. Questions or requests: support@pathhog.io.