Privacy at SpecVault.

Who to contact

SpecVault is the developer name. Contact [email protected] for privacy or support questions. Mailing address: 3911 7Th Ave, Unit APT 16, Anchorage, AK 99508, United States.

Information we handle

SpecVault stores the shop domain and installation/session information; Shopify staff identifiers used for permissions and approvals; product and variant IDs, titles and SKUs; Shopify Files metadata and public PDF URLs; document editions, model links, publication references and release history; and check results and operational events. If you email support, your message and any details you provide are handled in the support mailbox. Hosting and platform services may also process request information such as IP addresses and browser details.

The app requests read_files and write_products for these workflows. It does not request customer or order data scopes. Staff identifiers and merchant-supplied content can still contain personal information.

Why it is used

We use this information to authenticate the app, manage staff access and subscription entitlements, connect PDFs to product variants, prepare and verify releases, show coverage and file problems, support exports, and help diagnose errors. Optional daily checks run when enabled with eligible access.

Shopify provides authentication, store APIs, Files and storefront rendering. DigitalOcean hosts the app and database; Google/Gmail handles emails sent to the support address. Processing can occur in the United States and other locations used by these providers.

Public files and storefront links

PDFs selected from Shopify Files have public URLs. Publishing exposes the selected file reference and document information to shoppers. Do not add customer records, credentials, confidential information or sensitive personal information to public PDFs or document names. Withdrawing a release removes the selected storefront reference after the relevant render; it does not delete the Shopify file or copies already downloaded.

Retention and deletion

We keep active shop records while needed to provide the app. The retention schedule for historical version audits is 12 months, completed tasks 90 days, and completed-task error details 30 days. A reference needed by an active storefront publication is retained while that publication depends on it. Infrastructure request and error logs are handled separately by the hosting provider; the 30-day completed-task period does not describe those logs. These periods do not make Shopify Files, downloaded copies or third-party caches disappear.

Uninstall ends the installation and its active sessions. We handle a valid Shopify shop data erasure request separately from uninstall, while protecting any later installation from an older request. Shopify Files remain under the merchant’s control. For access, correction or deletion requests, email the address above with the shop domain and a description. We verify authority before acting; a shopper should also contact the merchant responsible for that store. Some records may need to be retained for an active publication or a legal obligation. We will explain the handling of a specific request.

Your choices

Merchants can choose which public PDFs to link, review publication changes, withdraw a reference, disable optional daily checks, export supported library and coverage records, and uninstall through Shopify. A business CSV export is not a complete personal-data export. Avoid sending passwords, access tokens or unnecessary identity documents with a privacy request.