ThemeGuard privacy policy

Effective date: 26 October 2026

Who we are and how to contact us

Sonothemes operates ThemeGuard, a Shopify app for merchant-initiated store backup and recovery. Contact Sonothemes at hello@sonothemes.com for privacy questions, requests or security concerns. Our website is sonothemes.com.

This policy covers ThemeGuard and related support. Our merchant data-processing terms describe processing on a merchant’s instructions. This policy does not describe the separate privacy practices of a merchant’s storefront, Shopify or a merchant’s own storage provider.

Our role

For customer information processed to back up or recover a merchant’s store, the merchant determines the purposes and acts as controller; Sonothemes acts as processor or service provider on the merchant’s instructions. Sonothemes determines the purposes for limited information used to administer support, secure the service and meet its own applicable obligations. Applicable roles depend on the processing and relevant law.

Information processed

When a merchant selects an area for backup or recovery, ThemeGuard processes the information available through that store’s granted Shopify permissions. Customer and order records may include names, email addresses, phone numbers, billing and shipping addresses, customer identifiers, order items and amounts, notes, tags and related store records. Selected products, themes, files and content can also contain information entered by the merchant. Do not place unnecessary sensitive personal information in store notes or backup content.

We process shop identifiers, authenticated Shopify staff identifiers, granted permissions, connection credentials, subscription status where configured, and operation metadata needed to authorize and run the app. Access records contain the shop, authenticated actor, time, action, outcome and operation identifier; they are designed to exclude customer field values and archive contents. Hosting providers necessarily process technical request information, such as network addresses and security events. Support correspondence contains what the sender provides; do not email passwords, API keys, customer lists or full backup archives.

ThemeGuard does not collect customer payment-card numbers or replay payments. Shopify manages app installation, merchant authorization and any app charges. Features and access depend on Shopify approval, store permissions and the selected plan.

Purposes and instructions

We use this information to authenticate the merchant and store, retrieve selected records, prepare and verify backups, perform merchant-requested recovery, explain coverage gaps, secure operations and respond to support or privacy requests. The merchant’s selections and explicit backup/restore actions provide instructions for the operation. Customer information is not used for advertising, sale, cross-merchant profiling or automated decisions with legal or similarly significant effects. We do not treat an archived marketing preference as permission to send marketing.

The merchant is responsible for its authority to instruct processing and for applicable notices, legal bases and customer choices. Before restoring historical records, the merchant must account for later erasure requests, consent withdrawals and changes. Restoring an old archive is not a way to reinstate withdrawn consent.

Where information goes

The app’s authenticated gateway runs on Cloudflare. Shopify API request and response data pass through this gateway as needed for the selected operation. Backup archives are assembled and processed on the merchant’s device; Sonothemes does not retain hosted copies of merchant archive files. Shopify receives recovery operations and staged files when the merchant starts a restore.

Shopify and Cloudflare provide platform, hosting, database or security services needed to operate the app. Where a Google Drive feature is available and the merchant connects it, archives are transferred directly between the merchant’s device and that merchant’s Google Drive, and Google processes them under the merchant’s account settings and its own terms. Google Drive is not enabled for every ThemeGuard installation. Connected-account credentials, where used, are encrypted in the gateway database. We do not give support staff routine access to merchant archives.

Information may be processed in countries where these providers operate. We do not promise that all processing occurs in one country. Where applicable law requires a transfer safeguard, the relevant processing must be covered by an applicable lawful mechanism, such as an adequacy decision or approved contractual safeguards. Contact Sonothemes for information about the safeguards relevant to your deployment.

Protection and storage

External connections use HTTPS. Stored gateway connection credentials and access-audit payloads are encrypted. Persisted app-managed backup working data on the device uses encrypted storage. Archives containing customer or order information require password encryption; theme/product-only archives may offer an unencrypted option. Archive integrity and encryption authentication are checked during import.

The merchant chooses and retains archive passwords. Sonothemes cannot recover or reset a lost archive password. A downloaded copy and its password remain under the merchant’s control. Protect the browser, operating-system account, passwords and exported copies, and verify recovery before relying on a backup. No system can promise absolute security.

Retention and deletion

App-managed local captures have a 30-day retention period, with expiry cleanup on the next app unlock or use; a closed browser cannot perform deletion. Active operations are excluded from expiry. Access-audit records expire after 90 days, webhook receipts after 30 days, and temporary authorization states after their deadline. Cleanup runs on scheduled execution and authenticated activity where applicable. Shopify uninstall or shop-redaction notifications remove server connection information, and shop-redaction also removes that shop’s access-audit records.

Downloaded archives and copies saved to a merchant’s own storage do not disappear when the app is uninstalled. The merchant must delete those copies and apply its own lawful retention policy. Sonothemes cannot remotely erase an offline device or an independent downloaded file. Provider disaster-recovery copies follow the provider’s retention and deletion lifecycle. Necessary support or legal records may be retained for the relevant purpose or applicable retention obligation; ask us about a specific record.

Privacy requests and customer choices

Customers should ordinarily contact the merchant that controls their information. Merchants can contact hello@sonothemes.com for help locating, accessing, correcting, restricting or deleting information within Sonothemes’ control. We verify the requester’s authority and assist with applicable requests; we may need the merchant to act on local or independently stored archives. Do not send the personal information itself unless a secure, necessary method has been agreed.

ThemeGuard receives Shopify privacy notifications through authenticated compliance webhook routes. Those notifications do not remotely delete merchant-owned files. Merchants must ensure that historical restores do not reintroduce information that should remain erased or restricted. Rights and response requirements depend on applicable law; individuals may also contact their competent data-protection authority.

Device storage and changes

ThemeGuard uses browser storage to process and protect backups and Shopify session tokens for app authentication. This policy does not authorize advertising cookies or additional tracking. We may update this policy when the service or its processing changes. The effective date identifies the current version; material changes will be communicated through the app or merchant contact channel as appropriate.