Privacy Policy

TrueFix — Shopify accessibility compliance app

Who operates this app

TrueFix is built and operated by Code Spark. If you have any questions about this policy or how your store's data is handled, contact us at support@code-spark.co.

What data we collect

When you install TrueFix, Shopify grants the app access to your store through its Admin API. We collect and store only the following, all of it tied to your store, not to your customers:

• Your shop's domain (e.g. your-store.myshopify.com)
• The OAuth access token and scopes Shopify issues to the app for your store
• Theme file contents, read and edited only where needed to scan for and fix accessibility issues (e.g. missing alt text, missing lang attributes, unlabeled interactive elements)
• Product and image data needed to apply and track alt-text fixes
• The accessibility scan results themselves — violation types, severity, which pages were affected, and a history of fixes applied or reverted

What we do not collect

TrueFix does not collect, store, or process any personal data about your store's end customers. We never access or retain customer names, email addresses, phone numbers, physical addresses, order history, payment details, or browsing behavior. The app's database schema contains no fields for any of this — everything we store is scoped to your store's configuration, theme, and accessibility scan results.

How we use this data

We use the data described above solely to:

• Run accessibility scans of your storefront and theme
• Apply fixes you request, and let you review or revert them
• Calculate your store's compliance score and track it over time
• Provide the continuous monitoring and reporting features you enable

We do not use your store's data for advertising, and we do not build any profile of your store for resale or marketing purposes.

Where your data is stored, and who else sees it

Your store's data is stored on our own server, in a MySQL database that we operate and control directly — it is not passed through any third-party data platform. Access tokens are stored server-side and are never exposed to your store's front end or to any other party.

We do not sell or share your store's data with third parties. The only outside systems TrueFix communicates with are Shopify's own APIs — the same connection Shopify itself establishes when you install the app — which is necessary for the app to read your theme/product data and apply fixes.

Data retention and deletion

While TrueFix is installed, we retain your store's scan history, fix history, and settings so the app can show trends and let you undo changes. If you uninstall TrueFix:

• The app is immediately deactivated for your store and stops accessing your data.
• Approximately 48 hours after uninstall, in line with Shopify's own compliance timeline, all of your store's data is automatically and permanently deleted from our database — this includes your shop record, scan history, scan results, fix history, monitoring settings, and alerts.

TrueFix also responds to Shopify's mandatory privacy webhooks (customers/data_request and customers/redact), which fire when one of your customers asks Shopify about their data. Because TrueFix holds no customer personal data at all, we acknowledge these requests and confirm there is nothing to provide or delete.

Your rights and how to reach us

As the merchant, you can ask us at any time what data we hold about your store, or ask us to delete it (which also happens automatically on uninstall, as described above). Reach us at support@code-spark.co for any question about your data or this policy.

Cookies and tracking

TrueFix does not use any analytics, advertising, or third-party tracking scripts. The only cookie the app sets is a short-lived session cookie used purely for security during the one-time installation process (to protect against cross-site request forgery while you approve the app's permissions) — it is not used for tracking and is not present during normal use of the app. Inside the Shopify admin, the app identifies your session using Shopify's own App Bridge session tokens, not cookies.

Changes to this policy

We may update this policy from time to time as the app evolves. The date below reflects the most recent revision.

Last updated: September 16, 2026