RecallPulse is a product recall monitoring app for Shopify merchants. It compares the products in your Shopify catalogue against published recall records and shows you what it found, so you can decide what to do.
This policy explains what RecallPulse accesses, what it stores, how long it keeps it, and who else is involved. It describes how the app works today.
Information RecallPulse accesses
RecallPulse requests one Shopify permission: read_products.
It does not request Shopify customer scopes, order scopes, or any product write scope. It reads the catalogue information it needs to compare your products against official recall records: product titles, identifiers such as SKU and barcode, and variant details.
Read-only access and merchant control
RecallPulse does not remove, hide, or change products automatically.
RecallPulse is designed around read-only Shopify product access. It does not request permission to create, edit, hide, archive or delete Shopify products, and it does not perform any of those actions on your behalf.
When RecallPulse finds a possible connection between one of your products and a recall record, that result is evidence for review. It is not automatic confirmation that your product is affected. RecallPulse shows you the matching evidence alongside the recall information and records the decision you make. You decide what action to take.
RecallPulse does not act on your behalf with regulators and cannot carry out recall actions for you. RecallPulse is a monitoring and review tool. It cannot guarantee that every relevant recall will be detected, or that every mistake will be prevented.
Information RecallPulse stores
RecallPulse stores the information it needs to monitor your catalogue over time and to show you a reviewable history:
- your Shopify shop domain
- Shopify product IDs, product titles and variant IDs
- records of each check, including what was compared and what the outcome was
- potential recall matches, the supporting evidence for each, and their current review state
- review decisions you record, with any reason or note
- your monitoring settings, such as whether checks are on
- your subscription and plan state, as confirmed by Shopify
Product identifiers such as SKUs and barcodes are read from Shopify at the time of a check and used for matching. They are not kept as a stored copy of your catalogue.
RecallPulse also stores the Shopify session and authentication information needed to run the installed app. Shopify may provide authentication and account identifiers as part of that session information.
How information is used
Stored information is used only to run the app:
- comparing your catalogue against recall records
- showing matches and their supporting evidence
- keeping a history of checks, matches and your decisions
- sending the notifications you have turned on
- applying the plan limits confirmed by Shopify
- diagnosing faults in the app
RecallPulse does not sell your data, and does not use it for advertising or for marketing to your customers.
Notifications and email
Notifications are disabled unless you enable them. If you do, RecallPulse stores the notification email address you supply and a record of each notification it attempted, so you can see whether a message was delivered.
These are transactional messages about your own monitoring. RecallPulse does not send marketing email.
Third-party service providers
- Shopify: Admin API access, authentication, billing, and the mandatory compliance webhooks.
- Railway: application hosting and the PostgreSQL database infrastructure RecallPulse runs on.
- Resend: delivery of transactional notification email.
- Official regulator sources, including Food Standards Australia New Zealand (FSANZ). RecallPulse retrieves published recall information from these public sources. No merchant information is sent to them.
When a recall notice is published as a document, RecallPulse reads the text itself, using software running on its own servers. The document is not sent to another company for processing.
Data retention
While RecallPulse is installed, scan history, alert history, evidence and the decisions you record may be retained so the app can provide monitoring history, review history, evidence history and audit functionality. This history records what was checked, when it was checked, and the decisions you made.
Uninstall and deletion
When you uninstall RecallPulse:
- automatic monitoring is disabled
- notification preferences are disabled
- Shopify sessions associated with your store are removed
- historical merchant records may remain temporarily, until Shopify sends the required shop data deletion request
When Shopify sends that deletion request (the shop/redact compliance event), RecallPulse deletes the merchant-specific data covered by it in a single transaction: scan runs, matches, evidence, alert state, review history, notification preferences and delivery records, monitoring settings, subscription state and remaining sessions.
Published recall records are not merchant data or personal information about your store. RecallPulse may retain these public records independently of merchant accounts.
Customer data
RecallPulse does not request Shopify customer or order scopes, and does not use Shopify customer or order records as part of its product recall monitoring.
Shopify’s customers/data_request and customers/redact compliance events are acknowledged without retaining any payload data, because RecallPulse holds no customer or order records to return or erase.
Security
RecallPulse limits what it can access:
- Shopify access is limited to the permissions its current functionality needs
- it is designed around read-only product access
- merchant-specific records are stored separately from the public recall records
- access is authenticated using Shopify’s own authentication and session mechanisms
- the application and its database run on production hosting infrastructure provided by Railway
No service can promise perfect security, and RecallPulse does not. This page describes how the app is built; it does not hold a security certification, and nothing here is a guarantee or legal advice.
Changes to this policy
RecallPulse is actively developed, and this policy may be updated as the app changes. When a change is material, the effective date at the top of this page is updated.
Contact
Questions about this policy, or about the data RecallPulse holds for your store, can be sent to tata.phanitpol@gmail.com.
RecallPulse is an independent application. It is not affiliated with or endorsed by Shopify or by any regulator.