Privacy notice

Last updated 27 October 2026

This notice explains what personal data this website processes and why. We keep it short because we collect very little: no cookies, no analytics, no tracking pixels, and our fonts are served from our own domain.

Who is responsible

Apex Point Consulting GmbH, Reiteregg 99, 8151 Sankt Bartholomä, Austria. Email: hello@shopproof.app.

Visiting the website

The website is hosted by Amazon Web Services EMEA SARL (Luxembourg) in the Frankfurt region and delivered through the Amazon CloudFront network. To deliver a page, these servers necessarily process your IP address and basic request details. We have not switched on access logs, so we do not keep a record of your visits. The legal basis is our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR). CloudFront may serve you from a location outside the EU; Amazon is certified under the EU-US Data Privacy Framework and the transfer is also covered by the EU Standard Contractual Clauses in our data processing agreement with AWS.

Launch waitlist

If you sign up, we process your email address, the time you signed up and confirmed, and the IP address and browser details recorded at confirmation, which serve as proof of your consent. We use this only to email you when Shopproof launches. The legal basis is your consent (Art. 6(1)(a) GDPR).

Signup uses double opt-in: you are only added after you click the link in our confirmation email. Every email has an unsubscribe link, and you can also withdraw consent by writing to hello@shopproof.app. Withdrawal does not affect emails sent before it.

The list is managed by our processor Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which stores the data in the EU. We delete the list at the latest 12 months after launch, or earlier when you unsubscribe. Brevo keeps unsubscribed addresses on a suppression list so they are not emailed again.

Rules updates in the Shopproof plugin and app

The Shopproof WooCommerce plugin and Shopify app download a public rules file from our server once a day. The request contains no shop, customer or order data. Like any web request it reveals the shop server's IP address to AWS CloudFront, which delivers the file; we do not log these requests. The legal basis is our legitimate interest in keeping the rules in the plugin current (Art. 6(1)(f) GDPR).

Emailing us

Emails to our shopproof.app addresses are forwarded by Cloudflare Email Routing (Cloudflare, Inc.) to our mailbox. We use what you send only to answer you, based on our legitimate interest in replying (Art. 6(1)(f) GDPR), and delete it when it is no longer needed, unless the law requires us to keep it. Cloudflare is certified under the EU-US Data Privacy Framework.

Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to hello@shopproof.app.

You can also complain to the Austrian data protection authority: Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.