Valmont Meta Monitor Privacy Policy

Effective date: September 22, 2026

Valmont Meta Monitor is provided by Valmont Apps. The service independently monitors Shopify and Meta conversion-signal health.

Information processed

• Shopify shop domain, app authentication/session data, store timezone and store currency.
• Minimal Shopify order reference data: a one-way hash of the order identifier, timestamps, test-order status and order state. We do not persist order value, customer name, email, phone number or address.
• Selected Shopify customer events such as page view, product view, add to cart, checkout start and checkout completion. Checkout order identifiers are one-way hashed before storage.
• Meta OAuth credentials stored encrypted, the merchant-selected ad account and dataset/pixel, and read-only tracking-health statistics returned by Meta.
• Health evaluations, incidents, alert history and first-party product analytics needed to operate and improve the service.

Purpose and limits

We process this information only to authenticate the app, establish store-specific tracking-health baselines, compare Shopify reference signals with Meta-received signals, identify regressions, display evidence, support privacy requests and operate the service. We do not sell merchant or customer data.

Read-only Meta behavior

V1 does not install, replace, send, edit or delete Meta conversion events, pixels, datasets, ads or campaigns. Meta access is used only for monitoring.

Customer privacy and consent

The Shopify app pixel is configured for analytics-purpose consent and not for marketing or sale-of-data purposes. Valmont Meta Monitor does not intentionally collect Level 2 protected Shopify customer fields such as customer name, address, email or phone number.

Retention and deletion

Raw Shopify customer-event records and raw order-reference records are retained for up to 30 days and are automatically deleted after that period. Expired Meta OAuth state records are also removed automatically. Health evaluations, incidents and first-party app analytics may be retained while the app remains installed so merchants can review tracking history.

On app uninstall or a valid Shopify shop-redaction request, shop-linked application records, sessions and stored external credentials are deleted. On a Shopify customer-redaction request, order-linked raw reference records identified by Shopify are deleted. Provider backups and security logs may persist for limited operational retention periods.

Data access and privacy requests

Valmont Meta Monitor supports Shopify's mandatory customer data-request, customer-redaction and shop-redaction webhooks. Because the service does not persist customer names, email addresses, phone numbers or postal addresses, customer-linked records are limited to pseudonymized order-reference and customer-event records. Merchants can also contact us using the address below for access, correction, deletion or other privacy questions.

Service providers and international processing

Shopify provides app authentication, customer events and store integration; Meta provides authorized Marketing API data; Railway provides application and database infrastructure. Information may be processed in the United States and other locations where these providers operate.

Security

External OAuth credentials are encrypted before database storage. Public application traffic uses HTTPS, database traffic stays on private infrastructure networking, storefront code contains no server secrets, and the app minimizes the personal data it processes.

Contact

For privacy or support questions, contact valmontmarketing@gmail.com.