Effective date: July 26, 2026
This Privacy Policy explains how Surfaced, operated under the SkuWatch brand (“we,” “us,” or “our”), handles personal information through surfaced.skuwatch.app and related services that link to this policy.
1. Current prelaunch site
The current scanner is an illustrative preview. It does not submit a store URL, create an account, install a Shopify app, or collect a waitlist email. If those features become available, this policy and the relevant interface will explain the data collected before submission.
2. Information we collect
We may receive:
- information you send directly, such as your name, business email, message, and support correspondence;
- public storefront information when you later request an authorized scan, such as a submitted domain, public pages, robots directives, metadata, structured data, and scan results;
- technical logs generated by our hosting and security providers, such as IP address, browser type, device type, requested URL, timestamps, and diagnostic or security events;
- account, installation, billing, and usage information if paid or Shopify-integrated services are introduced.
Do not send passwords, payment-card information, private customer records, health data, or other sensitive information through general contact channels.
3. How we use information
We use information to provide and secure the Services, respond to support requests, maintain scan history when requested, diagnose errors, prevent abuse, understand aggregate usage, improve product checks, comply with law, and communicate about a product when you have requested or permitted those communications.
4. Public storefront data
Future scans are intended to analyze information already available on authorized public storefront pages. Public availability does not remove our responsibility to use the information for a legitimate service purpose. We will not intentionally access password-protected storefront areas through a public scan.
5. Cookies and analytics
This content site does not currently set first-party advertising or behavioral-analytics cookies. Infrastructure providers may process standard request logs for delivery, reliability, and security. If we add analytics, advertising, or non-essential cookies, we will update this policy and provide any consent controls required by law.
6. Sharing and service providers
We do not sell personal information. We may share limited information with infrastructure, hosting, security, communications, payment, customer-support, and analytics providers that process it for us; with professional advisers; during a business transaction; or when required to comply with law or protect rights and security.
The site is hosted through Cloudflare Pages. Future Shopify, AI-platform, or payment integrations may also process information under their own terms and privacy policies.
7. Legal bases
Where applicable law requires a legal basis, we process information as necessary to provide requested services, based on legitimate interests in operating and securing the Services, with consent where requested, and to comply with legal obligations.
8. Retention
We retain information only as long as reasonably necessary for the purpose collected, including support, security, contractual, accounting, and legal requirements. Retention periods may vary by data type. We may retain aggregated or de-identified information that no longer identifies an individual.
9. International processing
Our providers may process information in countries other than your own. Where required, we use appropriate contractual or legal safeguards for cross-border transfers.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may also opt out of marketing communications. To make a request, contact us using the address below. We may need to verify your identity.
11. Security
We use reasonable administrative and technical safeguards appropriate to the information handled. No internet service is completely secure, and we cannot guarantee absolute security.
12. Children
The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
13. Third-party links
Our site links to third-party services and documentation. Their privacy practices are governed by their own policies, not this one.
14. Changes
We may update this policy as Surfaced develops. The effective date above identifies the latest version. We will provide additional notice where required for material changes.
Contact
Questions about privacy can be sent to [email protected].