Unflag

Privacy policy

Last updated 6 November 2026

This policy explains what data the Unflag Shopify app and the getunflag.com website collect, why, and what happens to it. Unflag is operated by Polka Labs Ltd, a company registered in England and Wales (“we”, “us”). We are the data controller for the data described here.

The short version

  • Unflag reads your store so it can check it. It has read-only access and cannot change anything.
  • Unflag does not request or store your customers’ personal data or your orders.
  • If you connect Google Merchant Center, we read your account’s status and product issues only to show them to you.
  • We don’t sell data and we don’t use it for advertising. Access tokens are encrypted, and when you uninstall, we delete everything linked to your store.
  • We keep anonymous statistics (for example, “check PD06 found a problem in a small UK store in October”) that can’t identify your store. They help us make the checks more accurate.

Data we access from Shopify

When you install Unflag, you grant it read-only access through Shopify. Unflag uses that access to read:

  • Store details: store name, domain, primary language, markets, the store’s email address and its customer contact email.
  • Products: titles, descriptions, images, prices, brands, barcodes and similar product information.
  • Store policies: refund, shipping, privacy, terms of service and contact information.
  • Online store content: pages, navigation menus and theme content.
  • Shipping settings: shipping zones, rates and delivery times.
  • Sales channels: whether the Google & YouTube channel is installed and which products are published to it.

Unflag also loads your store’s public pages, the same way a shopper would, to check what visitors see. When it does this, it identifies itself as an automated agent named Unflag.

Unflag does not request access to customer records, orders, payments or staff accounts.

Data we access from Google

Connecting Google Merchant Center is optional. If you choose to connect, you sign in with Google and approve access on Google’s own consent screen. Unflag then reads, through Google’s Merchant API:

  • Your Merchant Center account details and account status, including warnings and suspensions.
  • Product statuses and the issues Google reports for each product.
  • Account settings that affect eligibility, such as your business address and phone number, customer service contacts, website, shipping and return settings, and which Google programs are active.
  • Notices Google sends us when one of your products’ status changes (for example, when a product is disapproved), which we keep for 30 days to send you alerts.

We use this Google data only to show it to you inside Unflag, matched with the store problems that likely caused it. We do not use it for advertising, we do not sell it, we do not share it with anyone except as needed to run Unflag, and we do not use it to train AI or machine learning models. People at Polka Labs only look at it with your permission (for example, when you ask for support), for security purposes, or where the law requires.

Unflag’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time on Unflag’s Google page, or from your Google Account’s security page. When you disconnect, we delete the Google access tokens and the Google data we stored.

What we store, and why

  • Access credentials issued by Shopify (and Google, if connected), so Unflag can run scans. These are stored encrypted on our servers and never shown to anyone (see “How we protect your data”).
  • Scan results: the problems found, with short excerpts of the store content that caused them, so you can see them and track progress. On paid plans this includes the AI review’s findings, each with the exact text it refers to.
  • Alert settings and an email address: on paid plans, Unflag re-scans your store every week and emails you when it finds a new problem (and, on Shield Pro, when Google disapproves a product). Alerts go to your store’s email address in Shopify unless you choose another one. You can change the address or turn alerts off on Unflag’s Home page, or with the link in any alert email.
  • Basic technical logs (such as request times and errors) to keep the service working and secure.

Our legal basis under UK GDPR is the performance of our contract with you (providing the service you installed) and our legitimate interest in keeping the service secure and working.

Anonymous statistics and “This is wrong” reports

To find out which checks are useful and which are too strict, Unflag keeps a separate anonymous record of each scan. It contains only: the month (not the date or time), your country code, a product-count band (such as “11-50”), the theme name if it is a widely used theme (otherwise “Other theme”), the score rounded to the nearest 5, and the list of check codes that found a problem, couldn’t confirm or were skipped. It contains no store name, web address, email, product names or store text, and it can’t be linked back to your store. We also count installs and uninstalls by month and country. Scans of Shopify development stores aren’t counted. Our legal basis is our legitimate interest in improving Unflag; because this data doesn’t identify you, it is kept after you uninstall.

Each finding has a “This is wrong” button. Reporting a finding saves the check code and nothing else. If you also tick “Share this example with Unflag”, we save the finding’s explanation and quoted text, and any note you write, after automatically removing your store name, business and personal names, email addresses, phone numbers, web links and long numbers. Shared examples aren’t linked to your store, so we can’t find and delete one later on request; please don’t tick the box if you’d rather not share. They are used only to fix our checks and are deleted after 12 months. Our legal basis for shared examples is your consent, given by ticking the box.

Google Merchant Center data, and the results of the checks that use it, are never included in anonymous statistics or shared examples, and are handled only as described in the Google section above.

Who processes data for us

  • Shopify, which hosts the app inside your admin and handles app billing.
  • Google, if you connect Merchant Center.
  • Our server hosting provider, with servers located in the United States.
  • Resend, our email delivery provider (United States), to send alert emails. It receives the recipient address and the email’s content.
  • Anthropic (United States), which provides the Claude AI model behind the AI review on paid plans. It receives your store’s own text (policies, pages, theme text, product titles and descriptions, and your home page), never customer data or Merchant Center data. Under Anthropic’s commercial terms this data is not used to train its models.

Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or equivalent contract terms.

How we protect your data

We protect the data Unflag handles, and especially the access Shopify and Google give us, with these measures:

  • Encryption in transit. All traffic between your browser, Unflag, Shopify and Google uses HTTPS (TLS). Unflag never sends store or Google data over an unencrypted connection.
  • Encryption at rest for access tokens. The Shopify access tokens and the Google refresh tokens that let Unflag read your data are encrypted with AES-256-GCM before they are saved. The encryption keys are kept only in our server’s protected configuration, separate from the database and never in our source code.
  • A database that isn’t on the internet. Our database accepts connections only from the Unflag app on the same server. It can’t be reached from outside.
  • Restricted access. Only authorised Polka Labs staff can access our servers, and only with a personal cryptographic key (password logins are switched off). Our internal admin page requires a strong password, signs people out after 12 hours and locks after repeated wrong attempts. Staff look at a store’s data or Google data only with your permission (for example, when you ask for support), for security purposes, or where the law requires.
  • Verified requests. Every message Shopify and Google send to Unflag is checked against a cryptographic signature or a secret unique to your connection, and messages that fail the check are rejected. The Google sign-in process is also protected against forged requests.
  • Least access, least data. Unflag has read-only access to your store and asks Google only for Merchant Center access. Google data is used only to show it to you; it is never added to anonymous statistics, shared examples or AI review input.
  • Deletion. Disconnecting Google revokes Unflag’s Google access and deletes the stored Google data. Uninstalling deletes everything linked to your store (see “How long we keep data”).
  • Backups and monitoring. Database backups stay on our own server, readable only by the system administrator account, and are deleted after 3 days. We keep the server’s software updated, and we are alerted automatically about errors and downtime.
  • If something goes wrong. If a security incident affects your data, we will tell you without undue delay and, where required, report it to the UK Information Commissioner’s Office within 72 hours.

How long we keep data

We keep store data and scan results while Unflag is installed, and delete scan results older than 12 months automatically. When you uninstall, we remove Unflag’s access to your store straight away; 48 hours later Shopify asks us to erase your store’s data, and we delete everything linked to your store (scan results, settings and records of your installation) at that point. If that request doesn’t reach us, we delete the same data automatically 7 days after you uninstall. If Shopify freezes, locks or closes your store while Unflag is installed, we keep your data so Unflag works again if the store reopens, and we only check once a week whether it has; if your store stays unavailable for 6 months, we delete the same data. Backups are kept for up to 3 days before they are deleted. Google data is deleted as soon as you disconnect Google or uninstall. Anonymous statistics are kept, as described above; shared examples are deleted after 12 months.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Email hello@getunflag.com. We reply within one month. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

This website

getunflag.com does not use advertising cookies. If you choose “Allow analytics”, we use Google Analytics 4 (provided by Google) to count visits and see which pages are useful. Analytics cookies are only set after you agree, IP addresses are not stored in full, and Google Signals and ad features are off. If you choose “No thanks”, no analytics cookies are set. You can change your choice at any time by clearing this site’s data in your browser. Our web server keeps standard access logs for security for up to 30 days.

Changes

If we change this policy, we’ll update the date above. For significant changes, we’ll tell you inside the app or by email before they take effect.

Contact

Polka Labs Ltd, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom (company no. 17023306). Email hello@getunflag.com, phone +44 7862 608675.