Privacy policy

Last updated: 7 October 2026

This policy explains how Bastion Feed ("Bastion", "we") handles data. Bastion Feed is a Shopify app operated by Mujtaba & Co. that sends a merchant's product catalog to Google Merchant Center and checks it for problems. If you have questions, email support@bastioncommerce.com.

1. Data we collect

From your Shopify store, with the permissions you approve at install:

Products and variants: titles, descriptions, images, prices, barcodes, SKUs, vendor, product type, inventory and availability.
Store details: store name, domain, currency, country, store policies (refund, shipping, privacy, terms) and online store pages.
The name and email of the staff member who installs or uses the app, as provided by Shopify for sign-in.

From your Google account, only after you choose to connect it:

Your Google account email address.
Access and refresh tokens that let Bastion act on your Merchant Center account.
Merchant Center account IDs and names, and the products, approval statuses and issues in the accounts you choose.

We do not collect customer data. Bastion does not request access to your orders, customers or payments.

From our website, when you request early access: your name, email, store URL, role, number of stores, platform, an optional message, and the country your request came from. We use these only to contact you about Bastion and delete them on request.

2. How we use data

To build and send your product feed to Google Merchant Center.
To check products and store policies for problems and show you how to fix them.
To show Google's approval status and issues for your products inside the app.
To generate suggested product titles and attributes, which are applied only when you approve them.
To provide support, keep the service secure and meet legal obligations.

We do not sell data, use it for advertising, or share it with data brokers.

3. Google user data

Bastion requests the Google Merchant Center scope (https://www.googleapis.com/auth/content) and your email address. We use Google user data only to provide the features you can see in the app: sending products to your Merchant Center account and showing their status and issues to you.

Bastion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to develop, improve or train generalised AI or machine learning models.
We do not transfer Google user data to others except as needed to provide or improve the features you use, for security, or to comply with the law.
Our staff do not read Google user data unless you ask us to for support, it is needed for security, or the law requires it.

4. AI processing

When you use AI suggestions, product text and images from your Shopify store are sent to our AI provider (Anthropic) to generate suggestions. Data from Google APIs is not sent for this purpose. Our provider processes the data on our behalf and does not use it to train its models.

5. Where data is stored and who processes it

Data is stored by our hosting and database providers. We use the following service providers, each bound by data protection terms:

Hosting and database providers, to run the app and store data.
Anthropic, for AI suggestions (product data only).
An email provider, to send alerts and reports you ask for.

6. Security

Data is sent over encrypted connections. Google tokens are encrypted at rest with AES-256. Access to production systems is limited to people who need it to run the service.

7. Retention and deletion

Disconnecting Google in Bastion's settings revokes Bastion's access token with Google and deletes the stored tokens immediately.
Uninstalling the app starts deletion: all data stored for your store is deleted within 48 hours of Shopify's deletion request.
You can ask us to delete your data at any time by emailing support@bastioncommerce.com.
You can also remove Bastion's access to your Google account at myaccount.google.com/permissions.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict processing. Email us to use these rights. We respond within 30 days.

9. Changes

We will post changes to this page and update the date above. Significant changes will be announced in the app.

10. Contact

Mujtaba & Co. · support@bastioncommerce.com