Privacy Policy

AltorLab provides a Shopify subscription failure monitor that helps merchants detect billing mismatches across Shopify, Recharge, and Stripe. This Privacy Policy explains what store data we access, how we handle credentials, how long we retain scan results, and how to request deletion.

What data we access

When you connect your Shopify store, we request only the read-only OAuth scopes needed to inspect subscription failures:

read_orders
read_customers
read_own_subscription_contracts
read_customer_payment_methods

We use this access to identify failed billing attempts, mismatched subscription states, affected customers, and payment-method-related failure patterns. We do not request write scopes for Shopify data as part of the scan.

Recharge API key handling

If you provide a Recharge API key during a scan, it is used only to fetch the data required to compare Recharge state with Shopify and Stripe. Recharge API keys are never stored in our database, logs, or long-term backups after the scan request completes.

How we use data

To run cross-stack diagnostics across Shopify, Recharge, and Stripe
To generate scan reports that highlight failed renewals and revenue leaks
To provide support if you contact us about a scan result or deletion request
To maintain service reliability, security, and abuse prevention

Scan result retention

Scan results are retained for up to 30 days so merchants can review findings, follow up on support questions, and validate fixes. After that window, stored scan results are deleted in the normal course of system cleanup unless a shorter deletion is requested.

Third-party services

We rely on infrastructure and platform providers such as Shopify, Recharge, Stripe, Vercel, and analytics tooling to operate the monitor. Each provider handles data under its own terms and privacy commitments.

Data sharing

We do not sell merchant or customer data. We share data only with service providers needed to run the product, secure the system, and fulfill legal obligations.

Data deletion

To request deletion of scan data or connected-store records, email hello@altorlab.org with your store domain and the request details. We will process deletion requests within a reasonable timeframe.

Contact

For privacy-related questions, contact us at hello@altorlab.org.

Last updated: July 2026