Privacy policy
StoreProof is operated by VantagePoint Networks. This policy explains what personal data we handle and why. We collect the minimum we need to run the service.
Last updated 13 October 2026
Who we are
The data controller is VantagePoint Networks. For any privacy question, contact info@vpnetworks.co.uk.
What we collect
- Account details — your email address and password (passwords are stored only as a secure hash by our authentication provider).
- Store information — the store URLs you add and the accessibility scan results we generate for them.
- Shopify connection — if you connect a store, your myshopify.com domain and an Admin API access token, used solely to read products and apply the fixes you request.
- Billing — handled by Stripe. We never see or store your full card details.
Why we use it (legal basis)
- To provide the service you signed up for — performance of a contract.
- To send you scan reports and service emails — contract / legitimate interest.
- To secure the service and prevent abuse — legitimate interest.
Who processes your data
We use a small set of trusted processors to run StoreProof:
- Supabase — database and authentication (EU region).
- Vercel — application hosting.
- Stripe — payment processing.
- Resend — transactional email.
- Anthropic — generating alt-text descriptions from product image URLs when you run fixes.
- Shopify — your own store, which you authorise us to access.
How long we keep it
We keep account and scan data for as long as your account is active. Delete your account or email us and we will erase your personal data, except where we must retain records to meet a legal obligation.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of your personal data, and object to certain processing. Email info@vpnetworks.co.uk and we will respond within one month.
Cookies & analytics
We use strictly necessary cookies to keep you signed in — these are always on, because the service can’t work without them, and no consent is required for them under UK GDPR.
Beyond that, we use privacy-friendly, aggregate analytics (Vercel Analytics) to understand which pages and steps work — and only if you choose “Accept all” on the cookie banner. Pick “Essential only” and no analytics run at all. We never use third-party advertising or cross-site tracking cookies. You can change your mind any time by clearing this site’s data in your browser.