Privacy Policy

Green Claims Checker · Shopify App · Last updated 4 November 2026

1. Who we are

BrandUp Factory GmbH, Duvenstedter Berg 55, 22397 Hamburg, Germany (“BrandUp”, “we”) provides the Shopify app “Green Claims Checker”. Contact: info@brandupfactory.com.

2. Roles

For the store texts the app reads and the findings, notes and evidence the merchant records, the merchant is the controller and BrandUp acts as processor. For the merchant account data we need to run and bill the app, BrandUp is the controller.

3. Data we process

Store data from Shopify — Shop domain, shop name, contact email, primary domain and locale, and the texts of products, collections, pages and blog articles: title, description, SEO title and description, tags, vendor, product type, image alt texts, text and rich-text metafields, the translations of these texts into the store’s other languages, article summary, handle and status.

Data the app creates — A plain-text snapshot of each scanned text with a checksum, the findings (flagged term, excerpt, position, rule, severity, status) and scan runs with their statistics.

Data entered by the merchant — Notes on findings, justifications and evidence (reason, type of evidence, link to the document, validity date), custom rules and the scan settings including an optional notification email address.

AI assessment (Pro and Premium, optional) — Only when the merchant requests an AI assessment or rewrite on a finding, the flagged text passage with its surrounding text, the finding’s rule, the evidence notes the merchant filed for that claim (term, reason, type of evidence, validity date) and the merchant’s instruction to the AI are sent to Anthropic to generate the assessment or wording. The app stores the result with the finding and a monthly count of AI requests per shop; nothing else is kept. Merchants should not include personal data in the texts, evidence notes or instructions they send.

Weekly digest (Starter and up, optional) — The email address entered as its recipient (if one is entered; otherwise the shop email) and the time the last digest was sent.

Green Claims Seal (Premium, optional) — When the merchant switches the seal on, the app stores whether the seal is granted, the date of the scan it is based on and a random token; it writes the seal status (granted, dates, verification link) into a shop metafield that the merchant’s theme can display, and publishes a verification page under that token which names the store, its storefront address and the seal status. Switching the seal off withdraws the storefront status; the page then shows that no seal is granted.

Session and billing data — Shopify session tokens and the subscription status from Shopify App Pricing (read via the Shopify Partner API).

Support — Name, email and message content when the merchant contacts us.

The app does not access or store Shopify customer data (shoppers’ names, orders or addresses) and does not add anything to the storefront unless the merchant places one of its theme blocks. Texts are only written back to Shopify when the merchant applies a fix.

4. Purposes and legal bases

• Providing the app: scanning the merchant’s texts, showing findings and applying fixes (Art. 6(1)(b) GDPR, contract; Art. 28 GDPR processing).

• Billing through Shopify (Art. 6(1)(b) GDPR).

• Transactional emails about installation, uninstallation, the weekly digest and support (Art. 6(1)(b) and (f) GDPR).

• AI assessments and rewrites on the merchant’s instruction (Art. 6(1)(b) GDPR; Art. 28 GDPR processing for the merchant).

• Keeping findings, justifications and evidence records available while the app is installed, so the merchant can document how environmental claims are substantiated under Directive (EU) 2024/825 (Art. 6(1)(b) and (f) GDPR).

5. Recipients and sub-processors

Shopify — Platform, authentication, billing.

Heroku (Salesforce) — Application hosting, EU region (AWS Ireland).

Amazon Web Services EMEA SARL — Database hosting (Amazon RDS, encrypted at rest), region eu-central-1 (Frankfurt).

Resend — Transactional email and the optional weekly digest.

Anthropic PBC, USA (Claude API) — Only on Pro and Premium and only when the merchant requests an AI assessment or rewrite; processes the flagged text passage with its surrounding text, the finding’s rule, the merchant’s evidence notes for that claim and the merchant’s instruction as our processor to generate the result. This transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework where Anthropic is certified under it, and otherwise on the basis of the EU Standard Contractual Clauses.

Sentry — Error monitoring, if enabled.

Where data is transferred outside the EU/EEA, this is based on the EU Standard Contractual Clauses or an adequacy decision.

6. Retention

When the app is uninstalled, sessions are deleted immediately and all shop data (text snapshots, findings, scan runs, custom rules, justifications and the AI usage count) is deleted 48 hours afterwards by the app itself, or earlier when Shopify sends the shop/redact request, unless the merchant reinstalls the app in the meantime. The merchant’s Shopify texts are never changed by uninstalling. Merchants on Starter and up can export their findings as CSV, and on Pro and Premium the audit report as PDF, at any time before uninstalling.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to lodge a complaint with a supervisory authority (in Hamburg: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit). Contact us at info@brandupfactory.com.

8. Security

All connections are encrypted (TLS). The app only runs inside the Shopify admin with Shopify’s session authentication; every scanned text is stored with a SHA-256 checksum so re-scans only touch texts that changed.

9. Changes

We may update this policy, for example when the app gains new features. Changes are posted here with an updated date.

10. Contact

BrandUp Factory GmbH · info@brandupfactory.com · brandupfactory.com