Privacy

Last updated 16 August 2026

Feedwright is a Shopify app that audits a merchant’s product catalogue and, when the merchant chooses, applies corrections to it. This page describes exactly what it accesses, what it stores, and what it never touches.

What Feedwright accesses

When you install the app, it requests these Shopify permissions and no others:

write_products

Read the catalogue to audit it, and apply corrections you approve.

read_inventory

Detect products that are out of stock and blocked from sale.

read_publications · write_publications

Detect products not published to the channels feeding Shopify Catalog, and publish them when you ask.

write_themes

Write templates/agents.md.liquid, with a backup taken first and one-click restore.

read_legal_policies

Check that Terms, Privacy and Refund policies are published, which agentic storefronts require.

read_locales · read_shipping

Market-aware auditing, and whether a carrier shipping quote can resolve.

What Feedwright does not access

No customer data. No order data. The app does not request read_orders or read_customers, which means it cannot see your customers, their orders, their addresses or their payment information — not by policy, but because Shopify never grants it the ability.

This is a deliberate design choice. Catalogue integrity does not require customer data, so the app does not ask for it.

What is stored

Your catalogue snapshot — products and variants, so an audit does not have to re-download everything on every page view.
Audit results — findings, scores, and which checks ran.
A change journal — for every field the app modifies, the value that was in place immediately before. This is what makes undo restore the real prior value rather than a guess.
Theme backups — the previous contents of any theme file written.
Your dismissals — findings you have marked as not applying to you.
A Shopify session token, so the app can act on your behalf while installed.

Storefront requests

Feedwright fetches a small number of public files from your storefront — /agents.md, /llms.txt, /robots.txt, /.well-known/ucp, and a sample of product pages — to check what AI shopping assistants can see. These are public URLs, requested with a Feedwright/… user agent. Nothing is submitted and no forms are filled.

Third parties

Catalogue data is not sold, shared or used to train models. It is not sent to any third party except the infrastructure used to run the app (hosting and database), and Shopify itself.

Deletion

Uninstall the app and Shopify notifies us; all data associated with your shop is deleted. The app implements Shopify’s mandatory privacy webhooks — customers/data_request, customers/redact and shop/redact. The customer ones have nothing to return or erase, because no customer data is ever held.

To request deletion at any other time, email chamika@feedwright.io.

Contact

chamika@feedwright.io