← StoreOps

Privacy Policy

Last updated: July 11, 2026

The short version

Your store credentials never reach us — they are imported as non-extractable keys that exist only in your browser. What we do store: your email, your plan, and the pricing snapshots you save. We don't sell data, run ads, or use third-party ad trackers.

What we never collect

  • Your App Store Connect .p8 private key or Google service-account key — both are imported as non-extractable WebCrypto keys in your browser's local storage (IndexedDB). They sign short-lived API tokens locally. Their raw key material is marked non-extractable and cannot be exported through WebCrypto after import.
  • Your store data — app listings, prices, and metadata flow directly between your browser and Apple/Google. Our API proxy forwards requests (it exists only because Apple and Google block browser CORS) and stores nothing.
  • Payment card details — checkout is handled entirely by Lemon Squeezy.

What we collect

  • Account: your email address and a user id, managed by Clerk (our authentication provider).
  • Plan: whether your account is free, Pro, or Lifetime, sourced from Lemon Squeezy purchase events matched by email.
  • Snapshots: pricing snapshots you save are synced to your account so they follow you across devices. They contain price rows — no credentials.
  • Usage:anonymous page analytics and coarse product events (e.g. “a license was claimed”) to understand what's working. No session recording, no fingerprinting.

Who processes data for us

  • Clerk — authentication (email, sign-in)
  • Lemon Squeezy — payments, invoices, tax (merchant of record)
  • Neon — database hosting (plan, snapshots)
  • Vercel — application hosting and anonymous analytics

Email

We may send transactional email (receipts come from Lemon Squeezy) and occasional product updates to account holders. Every marketing email includes one-click unsubscribe.

Your data, your call

Want your account and everything attached to it deleted? One email: support@storeops.dev. Disconnecting a store in the app deletes the local signing key from your browser immediately.