Last updated 14 October 2026
1. Who we are
This Privacy Policy explains how Vezo Labs (“Vezo Labs”, “we”, “us”, “our”) collects, uses, stores and deletes information when a Shopify merchant (“you”, “the merchant”) installs and uses the Shopify app Vezo: Shop Monitor for Google (the “App”).
- Legal entity: Vezo Labs LLC
- Registered address: C-101, Dayal Bagh Colony, Faridabad, Haryana 121009, India
- Contact: info@vezolabs.com
- Data protection contact: info@vezolabs.com (we have not appointed a separate Data Protection Officer)
2. What the App does
The App connects to your Google Merchant Center account and your Shopify store to monitor the status of your products on Google. It shows which products Google has disapproved or flagged, explains each issue in plain English with steps to fix it, checks your Shopify product data for common problems before Google reviews it, and sends you alerts by email, Slack or in the App.
3. Information we collect
We collect only the information needed to provide the App. The App does not access Shopify customer data or order data. It requests only the Shopify read_products scope and does not make any changes to your storefront or theme.
| Category | Data | Source | Purpose |
|---|---|---|---|
| Store information | Shop domain, shop name, shop email, timezone | Shopify | Identify your store, send alerts and service emails, schedule digests in your timezone |
| Shopify access credential | Shopify offline access token (encrypted with AES-256-GCM) | Shopify | Read product data from your store |
| Shopify product data | Product titles, prices, image URLs, SKUs, barcodes, variant identifiers | Shopify (read_products) | Match Google products to Shopify products and run pre-flight checks |
| Google access credential | Google OAuth refresh token (encrypted) | Read product status data from Google Merchant Center | |
| Google account information | Email address of the Google account you connect | Show which Google account is connected | |
| Merchant Center data | Merchant Center account IDs and names; offer IDs; product statuses; item-level issues; aggregate product statuses; product status change notifications | Google Merchant Center | Detect disapprovals and issues, calculate the health score, send alerts |
| Alert settings and history | Alert rules, frequency, alert email addresses you enter, alert history | You | Deliver alerts as you configure them |
| Slack integration (optional) | Slack incoming webhook URL (encrypted) | You | Post alerts to your Slack channel |
| Own email server (optional) | SMTP host, port, username and password (password encrypted), sender name and address | You | Send alert emails through your own mail server |
| Error diagnostics | Technical error reports (for example, stack traces) | The App | Detect and fix software errors (see Sentry in Section 6) |
Alert email addresses you enter may belong to you or your staff. Please only enter addresses of people who expect to receive these alerts.
4. How we use information
We use the information above only to:
- Provide the App’s monitoring features: syncing product statuses from Google, mapping Google products to Shopify products and variants, explaining issues, ranking issues, running pre-flight checks, and showing your dashboard and product list.
- Send the alerts and digests you configure (email, Slack, in-App).
- Send transactional service emails related to your use of the App (for example, setup and account notices).
- Maintain security, prevent abuse, and diagnose and fix errors.
- Comply with legal obligations and with Shopify and Google platform requirements.
We do not sell personal information. We do not use your data for advertising.
5. Google user data and the Google API Services User Data Policy
The App requests access to your Google account through Google OAuth using the scope https://www.googleapis.com/auth/content (Content API for Shopping / Merchant API). The App uses this access only to read information from your Merchant Center accounts: the list of accounts you can access, product statuses, item-level issues, aggregate product statuses, and product status change notifications. The App does not use this access to create, change or delete products, feeds or account settings in Merchant Center. To receive status change notifications, the App registers a notification subscription with Google for the account you choose.
Limited Use disclosure. Vezo Labs’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google user data only to provide and improve the user-facing monitoring features of the App described in this policy.
- We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
- We do not sell Google user data.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized or interest-based advertising.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
- We do not allow humans to read Google user data unless (a) we have your affirmative consent for specific data (for example, when you ask our support team to look at a specific issue), (b) it is necessary for security purposes, such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized and used for internal operations in accordance with applicable law.
You can revoke the App’s access to your Google account at any time, either in the App (Settings > Google Merchant Center > Disconnect) or in your Google Account permissions page at https://myaccount.google.com/permissions.
6. Service providers (sub-processors)
We use the following service providers to run the App. They process data only on our instructions and for the purposes described here.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Contabo | Application hosting, database and Redis (queue/cache) | All data stored by the App (Section 3) | European Union (France) |
| Merchant Center data via the Google Merchant API and OAuth | Google credentials and Merchant Center data | United States and other Google locations | |
| Shopify | Platform the App runs on; billing | Store information, product data, subscription status | Canada, United States and other Shopify locations |
| Resend | Sending alert emails, unless you set up your own SMTP server | Recipient email addresses, email content (which may include product titles and issue descriptions) | United States |
| Slack | Delivering alerts to Slack, only if you connect a Slack webhook | Alert content (which may include product titles and issue descriptions) | United States |
| Sentry | Error monitoring | Technical error reports. Sentry is configured not to collect request bodies, request headers, query strings or user information. | United States |
7. International data transfers
The App’s servers and database are hosted in the European Union (France). Vezo Labs operates from India, and some of the service providers above process data in the United States, Canada or other countries. Where required by law, we rely on the European Commission’s Standard Contractual Clauses or the provider’s equivalent safeguards for these transfers.
8. Data retention and deletion
- While the App is installed: we keep the data described in Section 3 for as long as needed to provide the App.
- Disconnecting Google: you can disconnect Google at any time in Settings. This revokes the App’s Google access and deletes the Google data the App holds for your store.
- When you uninstall the App: your shop is marked inactive and the App’s access to your Google account is revoked about 10 minutes after uninstall.
- Permanent deletion: all data for your shop is deleted when we receive Shopify’s
shop/redactwebhook, which Shopify sends 48 hours after uninstall. - Customer data requests: the App does not collect or store Shopify customer data. When we receive Shopify’s
customers/data_requestorcustomers/redactwebhooks, there is no customer data to return or delete. - Error reports and logs: retained for up to 30 days.
- Backups: daily database backups, stored on the same access-restricted server, are kept for 14 days. Data deleted from the App disappears from backups when those backups expire, within 14 days.
9. Security
We protect your data with technical and organisational measures, including:
- Shopify access tokens are encrypted at rest with AES-256-GCM. Google refresh tokens, Slack webhook URLs and SMTP passwords are also stored encrypted.
- The App reads Shopify data with the minimum scope it needs (
read_products) and uses Google access only to read data. - Access to production systems is limited to personnel who need it to operate the App.
- Error monitoring is configured to exclude request bodies, headers, query strings and user information.
No system is completely secure. If we become aware of a security incident affecting your data, we will notify you as required by law.
10. Legal bases for processing (EEA, UK and Switzerland)
Where the GDPR or UK GDPR applies, we process personal data on these bases:
- Performance of a contract: to provide the App you installed and the features you configure.
- Legitimate interests: to keep the App secure, prevent abuse and fix errors, where these interests are not overridden by your rights.
- Legal obligation: to comply with applicable laws and lawful requests.
- Consent: where you choose to connect your Google account or a Slack webhook, or ask our support team to review specific data. You can withdraw consent at any time by disconnecting the integration.
11. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA). You have the right to know what personal information we collect, use and disclose; to request deletion; to request correction; and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. The categories of personal information we collect are listed in Section 3; we collect them from the sources and for the purposes listed there, and disclose them only to the service providers listed in Section 6.
To exercise any of these rights, email info@vezolabs.com. We may need to verify your identity, for example by confirming the request comes from the store owner’s email address. We will respond within the time required by applicable law.
You can also delete your data yourself by disconnecting Google in Settings and by uninstalling the App.
12. Cookies
The App runs inside the Shopify admin and relies on Shopify’s authentication. The App does not set its own cookies and does not use advertising, analytics or tracking scripts; Shopify may use cookies to keep you signed in to the Shopify admin. For our website, see https://vezolabs.com/privacy.
13. Children
The App is a business tool for Shopify merchants and is not directed to children. We do not knowingly collect personal information from children.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version at https://vezolabs.com/plugins/shop-monitor/privacy and update the “Last updated” date. If changes are material, we will notify you by email or in the App before they take effect.
15. Contact us
Vezo Labs LLC C-101, Dayal Bagh Colony, Faridabad, Haryana 121009, India Email: info@vezolabs.com Website: https://vezolabs.com