How DSK Translation Check handles store data

Controller contact and purposes

Data Sidekick is the publisher and privacy contact for this app. Merchants remain responsible for their own Shopify store data and for deciding whether to install and use the app. DSK Translation Check processes app data only to provide the translation audit service, keep the app authenticated, maintain billing access, secure and troubleshoot the service, handle support requests, and comply with applicable obligations.

Legal bases

• Contract necessity: providing the installed app, scans, issue queue, exports, schedules, and support requested by the merchant.
• Legitimate interests: securing the service, preventing abuse, debugging operational issues, and keeping metadata-only app records accurate.
• Legal obligations: responding to applicable privacy, security, accounting, and platform compliance requirements.

Data the app reads

• Shop identifier and Shopify session data needed for app authentication.
• Published and enabled shop locales.
• Shopify Markets and market web-presence metadata.
• Translatable resource metadata exposed by Shopify Admin GraphQL, including products, collections, pages, blogs, articles, menus, links, shop policies, product options, product option values, metafields, and metaobjects where accessible.
• Existing source and translation values transiently during a scan or detailed CSV export, plus Shopify translation status such as outdated flags.

Data the app stores

• Shopify session records required to keep the app installed.
• Scan metadata: status, timestamps, locale codes, resource types, checked field counts, issue counts, and redacted error summaries.
• Issue metadata: resource ID, resource type, locale, field key, market IDs/names/handles, issue type, severity, status, and resolved timestamp.
• Schedule metadata: cadence, next eligible run, lock timestamps, last scheduled run status, scan count metadata, and redacted failure summaries.

Data the app does not store

• Full source text or full translated text in persisted scan records, issue records, history, or schedules.
• Customer records, orders, addresses, phone numbers, or payment data.
• External AI prompts, AI outputs, or translation-provider API keys.
• Shopify API tokens in browser-accessible code.

Sharing and subprocessors

The app does not sell store data. It does not use external AI, machine translation, or third-party analytics services in v1. Billing is handled by Shopify through Shopify App Pricing.

Production runtime and database data are processed by the hosting provider listed in the policy details above.

The production app runtime and database are hosted in France. DSK Translation Check does not intentionally send persisted scan data to external AI, analytics, or translation services outside the European Economic Area in v1.

Retention and deletion

The app keeps up to 25 recent scan records per shop. Older scan records are pruned after manual scan completion.

When Shopify sends authenticated app uninstall or shop redact webhooks, the app deletes Shopify session records and app-specific shop data.

Merchant controls

• Uninstall the app from Shopify admin to remove access.
• Export issue metadata as CSV from the app.
• Contact support for privacy or deletion questions at support@datasidekick.nl.

Privacy rights

Depending on the applicable law and context, merchants and other individuals may request access, correction, deletion, restriction, portability, or objection for personal data processed by the app. Requests can be sent to support@datasidekick.nl.

Individuals in the European Economic Area can also contact their local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.