Merchant catalog data stays boring, useful, and protected.

Last updated: April 28, 2026

What we collect

SafeSKU GPSR connects to Shopify to read product catalog information such as product titles, descriptions, vendors, product types, categories, tags, images, variants, SKUs, barcodes, and product URLs. We also store merchant-approved draft GPSR data that is saved inside the app. If someone submits the early access form on our public website, we collect the submitted email address, optional Shopify store domain, category, and message so we can follow up about SafeSKU GPSR.

What we do not collect

SafeSKU GPSR is not designed to collect buyer/customer records, orders, payment details, checkout data, or sensitive personal information. If a Shopify privacy webhook is sent to us, we acknowledge it and delete shop data where required.

How we use data

We use catalog data to score GPSR readiness, identify missing manufacturer, EU operator, identifier, warning, instruction, and support details, save draft product safety files, export JSON reports, follow up with launch interest, and operate the app securely. We do not sell merchant data or early access contact details.

Retention and deletion

Product draft data is kept while the app is installed so merchants can continue their readiness workflow. When Shopify sends a shop redaction request, we delete stored sessions and saved product drafts for that shop. Merchants can also request deletion by emailing support@passportready.app.

Processors and hosting

SafeSKU GPSR is hosted on Hetzner infrastructure and uses Shopify APIs and Shopify Billing for authentication, app access, and merchant-approved subscription charges.

Contact

Questions, access requests, deletion requests, and privacy requests can be sent to support@passportready.app. SafeSKU GPSR is operated from Denmark.