Privacy Policy — SpeedSentry

Last updated: June 29, 2026 Effective date: June 29, 2026

SpeedSentry is developed and operated by JLU Studio ("we", "us", "our"). Contact: privacy@jlustudio.com

1. Overview

SpeedSentry is a Shopify application that helps merchants monitor their store's page speed, detect third-party app scripts, identify ghost scripts left behind after app uninstalls, and receive performance alerts.

We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

2.1 Store-Level Data (Not Personal Data)

SpeedSentry collects data at the store level, not at the customer level. We do not collect, store, or process personal data about your customers.

The following store-level data is collected when you install and use SpeedSentry:

Data Type	Purpose	Retention
Shop domain (e.g. yourstore.myshopify.com)	Identify your store	Until uninstall + 48h
Shopify access token	Read theme files and store settings	Until uninstall + 48h
Speed scores (PageSpeed Insights results)	Show performance history	Until uninstall + 48h
Script audit results (script URLs, sizes)	Identify third-party scripts	Until uninstall + 48h
Alert history	Track speed drop notifications sent	Until uninstall + 48h
Settings (alert email, thresholds, plan)	App configuration	Until uninstall + 48h
Store events (install, speed checks)	App analytics and diagnostics	Until uninstall + 48h

2.2 Alert Email Address

If you configure an alert email address in SpeedSentry settings, we store that email address solely to send you speed drop alerts and weekly digest reports. We do not use this email for marketing purposes.

2.3 Technical Data

When you use SpeedSentry, we may collect: - Browser type and version (for embedded app compatibility) - IP address (for security and abuse prevention, not stored long-term)

3. How We Use Your Data

We use the data collected for the following purposes:

Speed monitoring: Running daily PageSpeed Insights checks on your store pages
Script detection: Identifying third-party app scripts loading on your store
Alerting: Sending email notifications when your store speed drops
App functionality: Displaying performance history, trends, and diagnostics in the dashboard
App improvement: Aggregated, anonymized analytics to improve SpeedSentry features

We do not: - Sell your data to third parties - Use your data for advertising - Share your data with third parties except as described in Section 4

4. Third-Party Services

SpeedSentry uses the following third-party services to operate:

Service	Purpose	Privacy Policy
Google PageSpeed Insights API	Measure page speed scores	Google Privacy Policy
Neon.tech	Database hosting (PostgreSQL)	Neon Privacy Policy
Upstash	Job queue (Redis)	Upstash Privacy Policy
Resend	Email delivery for alerts	Resend Privacy Policy
Google Cloud Run	Application hosting	Google Cloud Privacy

All third-party services are bound by their own privacy policies. We have selected providers with strong privacy and security standards.

5. Data Retention

Your data is retained as long as SpeedSentry is installed on your store.

When you uninstall SpeedSentry: - Your data is soft-deleted immediately - All data is permanently deleted within 48 hours of uninstall - This includes all speed snapshots, script audit results, alerts, and settings

If you request data deletion via the Shopify GDPR webhook (shop/redact), all your data will be deleted within 48 hours of the request.

6. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and Shopify's Partner requirements.

Your rights under GDPR:

Right to access: You may request a copy of all data we hold about your store. Contact us at privacy@jlustudio.com.
Right to erasure: You may request deletion of your data at any time. Uninstalling SpeedSentry triggers automatic deletion within 48 hours.
Right to portability: You may request your data in a machine-readable format.
Right to object: You may object to certain processing activities.

SpeedSentry processes store-level operational data under the legitimate interest legal basis (Article 6(1)(f) GDPR) — specifically, the legitimate interest of providing the contracted app service.

Note: SpeedSentry does not store personal data about your customers. All data is keyed to your shop domain. Customer data requests (GDPR Article 15) will receive a response confirming no customer personal data is stored.

7. CCPA Compliance

For California residents, SpeedSentry does not sell personal information as defined by the California Consumer Privacy Act (CCPA).

8. Security

We implement appropriate technical and organizational measures to protect your data:

All data transmitted between SpeedSentry and Shopify is encrypted via TLS
Database access is restricted to authorized services only
Access tokens are stored securely and never exposed in logs
We conduct regular security reviews

9. Children's Privacy

SpeedSentry is a B2B application intended for Shopify merchants. We do not knowingly collect data from individuals under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will: - Update the "Last updated" date at the top of this policy - Notify you via the SpeedSentry app dashboard if changes are significant

Continued use of SpeedSentry after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or to exercise your rights:

JLU Studio Email: privacy@jlustudio.com Website: https://jlustudio.com

For urgent data deletion requests, please also contact Shopify support to trigger the GDPR webhook directly.