Valmont Redirect Guard privacy policy

Updated October 3, 2026. Operated by Valmont Marketing. Contact: valmontmarketing@gmail.com.

Data we process

Store domain, development-store status, authenticated Shopify sessions, native redirect paths and destinations, accepted baselines, HTTP status and destination evidence, monitoring preferences, observations and audit events. Shopify session storage can include staff profile fields supplied during authentication. We do not request customers or orders, install visitor tracking, or collect storefront visitor traffic.

Redirect URLs can contain information entered by merchants. Avoid embedding personal information or secrets in storefront URLs. Live checks exclude query-bearing URLs and do not send authentication cookies. Response bodies are inspected transiently for access barriers and are not stored.

Optional email

If you request operational email alerts, we store the recipient, verification state, suppression status and delivery records. The address must be confirmed before alerts start. Messages may contain store domain and redirect findings. Disable messages through the app or unsubscribe link. We do not send marketing campaigns through this feature.

Infrastructure

Shopify provides authentication, APIs and app billing. Railway hosts the application and PostgreSQL. Resend processes optional operational email when configured. Data is used to operate and secure the service, not sold or used for advertising.

Retention and deletion

Observation, scan, audit and email-delivery history is retained for 30 days. Current monitoring records and baselines remain while the app is installed. Authenticated uninstall and shop-redaction webhooks remove app records and sessions. Infrastructure backups expire under provider retention practices.

Your choices

Contact us to request access or deletion, with the store domain. We verify authority before acting. Uninstalling removes app access; the app never changes your Shopify redirects. Data is transmitted over HTTPS and operational secrets stay server-side.