Trust & Compliance

Proofly is built on principles of transparency, merchant control, and responsible AI usage. This page explains what data we access, how AI is used, and how you remain in control.

Visual representation of Store Quality Intelligence trust framework showing merchant approval workflow, data security, and transparent AI usage principles

What Data Proofly Reads from Shopify

Proofly requires read access to the following Shopify data via the Admin API:

Products: Title, description, images, pricing, SKU, inventory status
Store Settings: Delivery message configuration, return policy visibility
Shop Information: Store name, domain (for audit context)

What we do NOT access: Customer data, order history, payment information, or personally identifiable information (PII).

What Data Proofly Stores

Proofly stores the following data in secure GCP infrastructure:

Audit History: Findings, severity levels, timestamps
Change Log: Before/after snapshots of modified products
Remediation History: Applied fixes, approval timestamps

All data is encrypted at rest and in transit. Data is retained for audit and rollback purposes.

Data Deletion: When you uninstall Proofly, all stored data is deleted within 30 days.

How AI is Used

Proofly uses AI (Google Gemini) for analysis and suggestion only. AI does not have autonomous control over your store.

What AI Does:

Analyse product descriptions for clarity and completeness
Generate suggested fixes (e.g., missing descriptions, alt text)
Identify quality gaps that may erode trust

What AI Does NOT Do:

Make changes to your store without your approval
Access customer data or PII
Make pricing, inventory, or business decisions

Merchant Control: Every AI-generated suggestion is shown to you for review. You can approve, edit, or reject it. Nothing goes live without your explicit consent.

Change Control Philosophy

Proofly follows a strict change control process:

Review Before Apply

All changes require merchant approval. You review suggested fixes in the Proofly dashboard before they go live.

Version Control

Before/after snapshots are saved for every change. Complete audit trail for compliance and quality purposes.

Rollback Capability

Any change can be rolled back with one click. Proofly restores the previous version from the saved snapshot.

Security & Infrastructure

Hosting: Google Cloud Platform (GCP), secured infrastructure
Encryption: Data encrypted at rest and in transit (TLS 1.2+)
Authentication: OAuth 2.0 via Shopify (no passwords stored)
Monitoring: Automated health checks and error alerting
Compliance: Hosted on SOC 2 Type II certified infrastructure (Google Cloud Platform)

Merchant Control & Responsibility

You remain responsible for your store's content. Proofly is a tool to help you identify and resolve quality issues, but:

You review and approve all changes before they go live
You can edit AI suggestions to match your brand voice
You can reject any suggestion you disagree with
You maintain full ownership and control of your product catalogue

Proofly does not provide legal, compliance, or business advice. Merchants are responsible for ensuring their stores meet all applicable laws and regulations.

Shopify App Store Compliance

Proofly complies with Shopify App Store requirements:

✅ No unauthorised data collection
✅ Clear data usage disclosure
✅ Privacy policy publicly accessible
✅ Secure authentication (OAuth 2.0)
✅ No deceptive practices or over-promising
✅ Transparent pricing and billing

Questions About Trust or Security?

Use our contact form with any questions about data usage, security, or compliance.

Read Privacy Policy Read Terms of Service