How ShieldKit uses Google data

What we ask Google for

When you click Connect Google Merchant Center, Google asks you to allow ShieldKit one Merchant Center permission, which Google lists as “Manage your product listings and accounts for Google Shopping”. Google has no read-only version of it, so ShieldKit uses it only to read. Google also shares your Google account’s email address, so we know which login connected the store.

What we read

Your Merchant Center account ID and name, the issues Google has raised on the account, your product status counts and the website address on the account (to check it’s the same store). For stores with Recovery or Monitoring, ShieldKit also reads the issues on each product, with the product’s ID and title.

Why

To show you what Google reports, next to what our store check finds, and on Monitoring to tell you when Google reports a new or worse issue.

What we keep

The issues we read, so we can show what changed over time, and, if you signed in with Google, an encrypted sign-in token and the Google account’s email address. We keep them until you disconnect or uninstall ShieldKit.

What we don’t do

We don’t change your Merchant Center account. We don’t sell Google data, use it for advertising, share it with data brokers or use it to train AI models. People at ShieldKit don’t read it unless you ask us to, it’s needed for security, or the law requires it.

How to disconnect

In the Shopify app, open the Google page; on the website, open your store’s Connections page. Click Disconnect: we delete the sign-in token and the Merchant Center data we stored. You can also remove ShieldKit’s access from your Google Account at myaccount.google.com/permissions. Uninstalling the Shopify app disconnects it too.

ShieldKit’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Details are in our privacy policy.