Privacy Policy

Last updated: October 22, 2026

Adminlog ("we", "our", "us") is a Shopify embedded application developed by Bedrock Digital Apps. This privacy policy explains what data we collect, why we collect it, who processes it, how we store and protect it, how long we keep it, and what rights you have regarding your data.

1. What data we collect

When you install Adminlog on your Shopify store, we receive and store the following data through Shopify's webhooks and API:

Store information: Shop domain, plan, and staff member names and IDs when Shopify tells us who made a change
Product data: Product titles, descriptions, prices, variants, images, SKUs and barcodes — captured as audit log entries when changes occur
Order data: Order numbers, customer names, email addresses, order totals, fulfillment status — captured when order events occur
Customer data: Customer names, email addresses, phone numbers, tags — captured when customer records are created or changed
Inventory data: Stock levels, location names, SKUs — captured when inventory changes occur
Financial data: Discount codes, refund amounts and transactions — captured when financial events occur
Theme data: Theme names, which theme files changed, and theme settings snapshots used by speed fixes — captured when themes are published or edited
Settings you give us: Your notification email, and any Slack or webhook addresses you connect

We do not collect payment card numbers, bank account details, social security numbers, or any financial credentials. All payment processing is handled by Shopify.

2. Why we collect this data

We collect and process this data only to provide the Adminlog service:

Keeping an audit trail of changes made in your Shopify store
Showing who made each change, when Shopify tells us
Alerting you to unusual activity, such as mass deletions or refund spikes (rule-based checks)
Generating reports and analytics about store activity
Sending email alerts when the conditions you set are met
Monitoring your storefront's speed
Running the optional AI features (such as SEO suggestions and the AI assistant) when you use them

We don't sell or rent your data, and we don't use it for advertising or profiling. We share it only with the service providers listed in section 3, for the purposes listed there.

3. Who processes your data (sub-processors)

Company	What it does for us	Data it handles
Hetzner Online GmbH	Hosts our server and database.	All app data. The server is in Ashburn, Virginia, USA.
Cloudflare, Inc.	R2 object storage for our database backups.	Full database backups.
Google LLC	Gmail sends our alert, report and export emails. The PageSpeed Insights API runs the site speed tests.	Email contents, which can include audit details and CSV attachments; your storefront page URLs.
Anthropic PBC	Runs the optional AI features, only when you use them.	AI SEO: the product's title, description, type, vendor and tags, and your shop name. AI tag cleanup: your product tag names and counts. AI assistant and alert explanations: your question plus counts and summaries of activity, not raw audit records, staff names or customer details (anything you type into a question is sent as written).
Shopify Inc.	The platform Adminlog runs on, and the source of the store data.	Everything the app receives from your store.

GitHub hosts our source code and starts some scheduled jobs; it holds no store data. Slack workspaces and webhook endpoints that you connect receive the events you choose to send them; those are your choice, not our sub-processors.

4. Where your data is stored

Server and database: A cloud server at Hetzner in Ashburn, Virginia, USA. We run PostgreSQL on it ourselves.
Backups: Daily database backups, stored in Cloudflare R2.

Our server is in the United States. The sub-processors above may process data in other countries under their own terms. We don't have a published Data Processing Agreement yet.

5. How we protect your data

Encryption in transit: All connections to Adminlog use HTTPS (TLS 1.2 or later) with automatic Let's Encrypt certificates
Encryption at rest: Backups are stored in Cloudflare R2, which encrypts stored data. We don't add our own encryption to backups or to data in the database.
Tenant isolation: Every database query is scoped by your shop's unique identifier. One merchant cannot access another merchant's data.
Authentication: You sign in through Shopify. Sessions are stored server-side.
API security: Enterprise API keys are stored only as SHA-256 hashes. Webhook callbacks are signed with HMAC-SHA256.
Rate limiting: Per-shop webhook rate limits with temporary quarantine prevent abuse and overload.
Integrity checks: On Enterprise, audit records for products, orders, customers, inventory and several other kinds of change are sealed about 90 minutes after they are recorded and linked by a SHA-256 hash chain, so later edits or deletions can be detected. This is tamper-evident protection inside the app, not write-once storage; see our Security Overview for the details and limits.

6. Data retention and deletion

We keep your audit log data based on your plan:

Starter plan: 30 days
Professional plan: 90 days
Enterprise plan: 365 days by default (configurable up to 5 years)

A daily cleanup deletes data older than your plan's period. If your period gets shorter (for example after a downgrade or cancellation), the old period is kept for 30 more days first.

If you uninstall Adminlog, we delete your sessions straight away. About 48 hours later Shopify asks us to erase your store's data, and we delete it then. If that request doesn't arrive, a daily cleanup deletes it 7 days after the uninstall.

Deleted data stays in our backups until they expire: daily backups are kept for 14 days, and the backup from the 1st of each month is kept for 12 months. Occasional one-off backups taken before database changes are kept until we delete them.

7. Your rights (GDPR and CCPA)

You have the right to:

Access — Request a copy of the data we hold about your store
Rectification — Request correction of inaccurate data
Erasure — Request deletion of your data (this also happens automatically after an uninstall)
Portability — On Professional and Enterprise, export your audit logs as CSV or PDF from the Reports page
Restriction — Request that we stop processing your data while a complaint is resolved

We handle Shopify's mandatory privacy webhooks. customers/redact and shop/redact are carried out automatically when they arrive; erasure anonymises the customer's details even in sealed audit records. customers/data_request is logged: Enterprise stores can export that customer's records from the GDPR page, and any store can ask us for them.

To exercise any of these rights, email support@bedrk.dev.

8. Cookies and tracking

Adminlog doesn't use analytics or advertising trackers. The app loads Shopify's App Bridge script, which Shopify requires to run the app inside your admin, and the only cookies are the ones Shopify sets for that.

9. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via the in-app notification system. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Bedrock Digital Apps
Email: support@bedrk.dev

Adminlog by Bedrock Digital Apps