Privacy Policy

PriceProof: 二重価格 — Privacy Policy

Effective: 2026-07-12

Gyutae Oh (sole proprietor) ("we") provides the PriceProof: 二重価格 Shopify app, which records a store's offered-price history and helps merchants keep the records that substantiate the regular price ("通常価格") in their dual-price (二重価格) sale displays under Japan's 景品表示法 (CAA guideline). This policy explains what personal data we process. We are an independent data controller for the limited account data described below. We do not collect, receive, or store your customers' (consumers') personal data, and we do not access orders.

1. What we collect

• Shop identifiers & owner contact: your myshopify domain, shop owner name and email, and the OAuth access token issued by Shopify at install (stored encrypted). Used to operate the App, bill you, and provide support.
• Product price data: product/variant identifiers and the publicly offered prices of your own catalog over time, plus the market settings you choose. This is commercial data about your products, not personal data; we store it because the price-history record is the product's core function.

We request only the write_products API scope (product read and metafield read/write) needed to record prices and write the assessment metafield your theme block reads. We do not request the orders or customers API scopes and do not process consumer personal data. Compliance webhooks that Shopify requires us to register (customers/data_request, customers/redact) may deliver a payload containing a customer identifier; we do not store the body of these payloads — we acknowledge receipt only.

2. Legal bases (GDPR / UK GDPR)

Performance of our contract with you (providing and billing the App) and our legitimate interests in operating, securing, and supporting the service.

3. Where data is stored

Our servers are located in Japan (Tokyo), hosted on Fly.io.

4. Retention & deletion

We retain your price-history records for as long as needed to provide the service (the audit-evidence record is the point of the App). When you uninstall, we delete your shop's sessions, settings and price history immediately; Shopify additionally sends a shop/redact request approximately 48 hours later, which we honor by hard-deleting any remaining rows.

5. Sharing

We do not sell your data and do not use data from one merchant for the benefit of another (no cross-merchant use). Subprocessors (hosting) act on our behalf under contract; a current list is available on request.

6. Your rights

You may request access, correction, deletion, or export of your account data, or object to processing, by contacting us at nsjokt@gmail.com. You may also lodge a complaint with a supervisory authority (in Japan, the Personal Information Protection Commission, 個人情報保護委員会). We respond to requests within 30 days.

7. Contact

Controller: Gyutae Oh (sole proprietor), nsjokt@gmail.com