AccessGuard — Privacy Policy

Last updated: October 3, 2026

AccessGuard ("the app", "we") audits your Shopify storefront for accessibility (WCAG 2.1/2.2 AA), scores your ADA & EAA risk, and applies fixes you approve. It is operated by Wigley Studios LLC. This policy explains what we access, store, and share.

What we access

With your permission, AccessGuard accesses only what it needs to audit and fix your store:

• Public storefront pages — we load your store's public pages (home, a collection, products, cart, search, policies) in a headless browser to run the accessibility audit. We read only what any visitor's browser would load.
• Product catalog (read_products) — product titles and image URLs/alt text, to find images missing alt text and target fixes.
• Files (write_files) — only when you click a fix, to set image alt text.
• Content / pages (read_content, write_content) — to publish an accessibility-statement page at your request.

Theme-level fixes (skip link, keyboard focus, page language, zoom) are delivered by the AccessGuard theme app embed at runtime. The app requests no theme permissions and does not edit your theme files.

We do not request or access your orders or your customers' personal information. AccessGuard uses no Protected Customer Data scopes.

What we store

• Your shop's Shopify session/access token (to operate the app).
• Your audit history: scores, the issues found, the storefront URLs we scanned and short HTML snippets of the elements that failed (no customer data).
• Your settings: monitoring on or off and how often, your email preferences, the statuses and notes you record on manual checks, and an optional storefront password you provide so we can scan a password-protected store. The password is stored on our server and used only to open your storefront for scans.
• A copy of your subscription status from Shopify: plan, status, price, currency, billing interval, Shopify's subscription ID, start and renewal dates, and whether you have used the free trial.
• When you first and last opened the app, and how many times you have opened it.

What we send to third parties

On Pro, AccessGuard uses OpenAI in two places. When you press the alt-text fix, it sends the product image's URL and the product title so the model can draft alt text. During each audit, including scheduled re-audits, it sends the HTML snippets of failing elements and the automated checker's reason, so the fix instructions can be rewritten in plain language. On the free plan nothing is sent to OpenAI. No customer personal data is sent. If the model is unavailable, alt text falls back to your product title.

Emails we send you

We use the email address on your Shopify account (or your store's contact email if there is none) to email you about the app: a welcome email when you first open it, another when a paid plan starts, and a notice when your score drops and a weekly digest (both can be turned off in the app's settings), and a notice when we can't scan your storefront. These emails are sent from noreply@wigleystudios.com through our email provider, Hostinger. We keep a record of the address each welcome email was sent to.

Data retention & deletion

• The app and its data are stored on a server we rent from Hostinger.
• When you uninstall, we delete your Shopify access tokens straight away and mark your subscription record as cancelled. The rest of your data stays until Shopify sends us its shop deletion request (shop/redact), normally about 48 hours after you uninstall, and we then delete the data stored for your shop.
• When you uninstall we also save a short summary of how the app was used, such as when you first and last used it, how many checks you ran, your first and last score, and your plan. When the deletion request arrives we remove your shop's domain from this summary and keep the rest to understand why stores leave.
• We also honor the customers/data_request and customers/redact webhooks; because we store no customer personal data, these are acknowledged with nothing to return or erase.
• You can ask us to delete your data at any time: support@wigleystudios.com.

Your rights

You can uninstall the app at any time to stop data collection and start deletion. For any data request, contact us.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

Wigley Studios LLC, 8735 Dunwoody Place #12345, Atlanta, GA 30350, USA — support@wigleystudios.com