Guides

    Security and your data

    What SiteRemora can access, what it keeps, how AI is used, and how to reach us about security.

    What SiteRemora can access

    SiteRemora asks Shopify for your themes, your products and your published content, plus the optional right to edit page text. It asks for nothing about your customers or orders. Install SiteRemora lists each permission and what it's for.

    What it keeps

    • Your settings, your list of themes, and the access Shopify grants the app.
    • Scan results: the pages scanned, each issue, a sample of the code behind it, and screenshots of hard-to-read text.
    • The record of every fix, before and after, so any fix can be reverted.

    A saved storefront password is stored encrypted and used only to open your storefront for scans.

    Your theme

    A fix changes only the lines it shows you. Every change is recorded and can be reverted. SiteRemora never creates, duplicates or deletes themes.

    How AI is used

    Some fixes are drafted with AI:

    • For a code fix, SiteRemora sends the issue and the theme code involved.
    • For alt text, it sends the image.

    Drafts change your store only when you apply them. Autopilot, on Deep Sea, applies rule-based fixes only.

    When data is deleted

    Detailed scan results are trimmed over time while the app is installed. Your fix history stays. After you uninstall, your store's data is deleted when Shopify asks for it, about 48 hours later. See Uninstall SiteRemora and the privacy policy.

    Report a security issue

    Write to hello@siteremora.com, with enough detail for us to reproduce the issue.