Adwell: Shopping Ads Check

Privacy policy

Last updated: October 13, 2026

This policy explains what Adwell: Shopping Ads Check ("Adwell") reads and stores when a merchant installs the app on Shopify. Adwell checks a store for misrepresentation risks before Shopping ads. It works with Google Merchant Center. The scan is read-only: it does not edit products, the theme, or store settings. Results are guidance, not a guarantee of any Merchant Center decision.

Adwell is not affiliated with or endorsed by Google. Google and Google Merchant Center are trademarks of Google LLC.

Shopify access

Adwell requests only these read scopes. They match shopify.app.toml.

• read_products
• read_locations
• read_shipping
• read_legal_policies
• read_online_store_pages
• read_markets

Adwell does not request orders, customers, protected customer data, or any write access. It never changes your store.

Storefront visits

To check the public storefront, Adwell visits a limited number of pages, one request at a time, at least one second apart. It reads robots.txt and skips paths that file disallows. If the store responds with HTTP 429 or 430, Adwell slows down and stops that store after repeated throttling.

Storefront password

If you save a storefront password so Adwell can scan a password-protected store, Adwell encrypts it with AES-256-GCM before it is stored. Only the ciphertext, initialization vector, and authentication tag are saved. The password is used only to open the storefront password page during a scan. It is not written to logs. You can remove it at any time in the app.

Data we store

For each shop, Adwell stores:

• The shop domain.
• The Shopify session for that shop, including the access token and, when Shopify sends an online session, the staff-account fields in that session (such as name and email).
• The encrypted storefront password, if you saved one.
• Scan results, so you can review past scans.
• A one-way fingerprint of the shop domain, and the time a completed free scan was used. The fingerprint is not the shop address.

Adwell does not store customer personal data. It does not store orders or customer records. This data is kept in a Postgres database used to run the app.

Retention and deletion

Shopify delivers the mandatory GDPR compliance webhooks to POST /webhooks/compliance: customers/data_request, customers/redact, and shop/redact.

Adwell stores no customer records. customers/data_request and customers/redact are acknowledged, and no customer data is returned or deleted.

On shop/redact, and when you uninstall Adwell, the app deletes that shop's scan results, session data, and saved storefront password.

After deletion, only a one-way fingerprint remains. It is used solely so the one free scan isn't reset by reinstalling, and it can't be turned back into the store's address.

Selling and sharing

Adwell does not sell store data. It does not share store data with third parties for their own use. Scan results stay in Adwell so you can review them.

Contact

Questions about this policy: adwell@wmai.top