Privacy Policy

1. Who We Are

MageGuard ("we", "us", or "our") provides a Magento store monitoring service. This Privacy Policy explains how we handle information when you use our website at mageguard.net and our monitoring platform.

2. Information We Collect

We collect only the minimum information required to provide our service:

• Account information — your email address and password when you sign up.
• API authentication tokens — the Magento API credentials you provide to connect your store. These are stored securely and used solely to query your store's data on your behalf.
• Store monitoring data — metrics retrieved from your Magento store via the API (e.g. sales figures, uptime status) used to generate alerts and reports within your account.
• Basic usage data — standard server logs (IP address, browser type, pages visited) retained only as long as needed for security and operational purposes.

3. How We Use Your Information

We use the information we collect exclusively to:

• Operate and maintain your MageGuard account and dashboard.
• Connect to your Magento store and retrieve monitoring data.
• Send you alerts and notifications as configured in your account settings.
• Respond to support requests you send us.
• Improve the reliability and performance of our service.

4. Data We Do Not Retain

We do not store your Magento store's transactional data, customer records, or product information beyond what is temporarily processed to generate the metrics displayed in your dashboard. Once metrics are computed and displayed, raw data from your store is not persisted on our servers.

5. Data Sharing

We do not sell, rent, trade, or share your personal information or your store data with any third parties, period. We do not use advertising networks or analytics platforms that receive your data.

The only exception would be if we are legally compelled to disclose information by law, court order, or governmental authority — in which case we will notify you to the extent permitted by law.

6. Data Security

Your API tokens and account credentials are encrypted at rest and in transit using industry-standard encryption (TLS/HTTPS). We apply appropriate technical and organisational measures to protect against unauthorised access, alteration, or loss of data.

7. Data Retention

We retain your account data (email, hashed password, API tokens, and monitoring configuration) for as long as your account is active. If you close your account, we will delete your data within 30 days. Server logs are purged on a rolling basis.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw your API tokens at any time from your account settings.

To exercise any of these rights, contact us at the address shown on our website.

9. Cookies

We use only essential session cookies required to keep you logged in. We do not use tracking or advertising cookies.

10. Changes to This Policy

If we make material changes to this policy, we will notify you by email or by a notice within your dashboard before the changes take effect.

11. Contact

If you have any questions about this Privacy Policy, please contact us through the Contact link on our website.