Valmont Metaobject Guard — Privacy

Updated October 7, 2026. Operated by Valmont Marketing.

Information used

We read shop identity, merchant-owned metaobject definition names and types, storefront access settings, and selected entries’ IDs, handles and active/draft status. We do not query metaobject field values, customer records, orders or products. Select only storefront content types, never types containing personal information. App-owned and Shopify-owned types are excluded.

We store monitoring scope, metadata snapshots, accepted baselines, findings, scan history and Shopify sessions/access tokens. Shopify sessions may include staff identity fields. We do not sell data or add storefront scripts.

Providers and retention

Railway hosts the app and PostgreSQL. Shopify supplies authentication and billing. Scan and action history and resolved incidents are retained for 30 days. Current baseline and open incidents remain while installed. Verified uninstall and shop-redaction webhooks delete active records and sessions. Hosting backups follow the provider’s retention policies.

Contact

Request access or deletion at valmontmarketing@gmail.com. Include your shop domain, never a password or access token.