Privacy Policy — Scrapeify

Last updated: 25/07/2026

Who we are

Scrapeify ("we", "us", "our") is operated by MT Ecommerce FZE, based in Dubai, United Arab Emirates. Scrapeify is a tool for monitoring publicly available Shopify store product feeds and surfacing new product drops from stores you choose to watch.

For any privacy question or request, contact us at: info@scrapeify.io.

Our approach in one line

We only hold the information you personally enter into Scrapeify, we only hold it for as long as your account is active (so the account can actually work), and we do not sell it, rent it, or share it for marketing. When you delete your account, we delete the data associated with it.

What personal data we collect, and why

We only collect what you enter into the app yourself. Specifically:

Account data — your username and a securely hashed password (we never store your actual password — see "How we protect your data" below), and whether your account is an admin. Purpose: to let you log in and use the service. Legal basis: performance of a contract with you.

Shopify credentials, if you connect them — your Shopify store domain and API client ID. Your API secret is encrypted before storage and is never shown back to you or anyone else in plain text. Purpose: to let Scrapeify list products on your own Shopify store on your behalf, at your request. Legal basis: performance of a contract.

Telegram chat ID, if you link it — used only to send you new-drop alerts. You can unlink this at any time in Settings. Purpose: alerting. Legal basis: consent (you opt in by linking).

Supplier contact details, if you add your own — a name and WhatsApp number for any supplier you choose to add for quote requests. Purpose: to let you draft quote request messages within the app. Legal basis: performance of a contract, at your direction.

Technical and security logs — your IP address is recorded against login attempts (to detect and block brute-force attacks) and against actions you take in the app (an audit trail — what was done, when, by whom). Purpose: security, fraud prevention, and accountability. Legal basis: our legitimate interest in keeping the service secure.

Quote request records — when you use "Get exact quote," we log which supplier you contacted and when (not the content of any message you go on to send in WhatsApp — that happens entirely within WhatsApp, outside our systems). Purpose: rate-limiting and preventing abuse of supplier contacts. Legal basis: legitimate interest.

What we do NOT collect or store

We do not store the content of any WhatsApp message. When you click "Get exact quote," we generate a pre-filled link that opens your own WhatsApp app or WhatsApp Web — sending the message is something you do, using your own WhatsApp account, and that conversation happens between you and the supplier, not through our servers.

We do not run analytics, advertising, tracking pixels, or third-party marketing scripts. We do not build a profile of you. Product information from stores we monitor (titles, prices, images) is public commercial product information and is not linked to any individual's identity in our systems.

We do not sell your data

We do not sell, rent, licence, or trade your personal data to anyone, and we do not share it with anyone for marketing or advertising purposes. Full stop.

How we protect your data

• Passwords are hashed with scrypt, an algorithm designed specifically to resist brute-force attacks. We cannot recover your password, only reset it.
• Shopify API secrets are encrypted at rest using AES-256-GCM before being stored, and decrypted only in memory when actually needed to make a request on your behalf.
• Session tokens are cryptographically random and expire automatically.
• Access to production systems is limited to authorised personnel of MT Ecommerce FZE.

Who we share data with

We use a small number of service providers to run the service. Each only sees the minimum needed to do its job, and none of them receive your data for their own marketing purposes:

• Our hosting/infrastructure provider — hosts our servers and database.
• Telegram — only if you choose to link your account, to deliver alert messages.
• Shopify — only if you connect your own store, to create product listings on your behalf at your request.

How long we keep data

We keep the information you enter into Scrapeify only for as long as your account exists, because that data is what makes the account work. Specifically:

• Account data, Shopify credentials, Telegram links, supplier contacts and other user-entered content: kept while your account is active, and deleted when the account is deleted.
• Session tokens: expire automatically after 30 days.
• Audit and security logs: retained for a limited period for security and accountability purposes, then deleted.
• Login-attempt records: cleared automatically once no longer needed for security purposes (typically within around 15 minutes of the attempt, once any lockout has expired).

To delete your account, contact us at info@scrapeify.io and we will action the deletion.

International users

Scrapeify is operated from the United Arab Emirates. If you access the service from outside the UAE, your information will be processed in the UAE and in the countries where our hosting providers operate. We take reasonable steps to ensure your data is handled with the same level of care wherever it is processed.

Your rights

Depending on where you live, you may have rights over the personal data we hold about you, including the right to:

• Ask what personal data we hold about you, and get a copy of it
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to any legal obligation we have to keep certain records, e.g. security logs)
• Ask us to restrict or object to certain processing
• Ask for your data in a portable format
• Withdraw any consent you have given (e.g. by unlinking Telegram)

To exercise any of these rights, email info@scrapeify.io.

Changes to this policy

We may update this policy as the service changes. If we make a material change, we will notify you by email or by an in-app notice before it takes effect.

Contact

MT Ecommerce FZE, Dubai, United Arab Emirates — info@scrapeify.io.