ShopProof is a social-proof and urgency layer for OpoShop stores. It displays recent-sales popups, live-viewer counts, low-stock notices, countdown timers, and a free-shipping progress bar on a merchant's own storefront , and every number it shows is drawn from that store's real data. Nothing is fabricated. This policy explains exactly what data ShopProof accesses, why, and how it is protected. Last updated 12 October 2026.
ShopProof reads your store's own orders, stock and live visitor counts, read-only, to show real activity on your storefront. It never makes up numbers, never stores payment card data, shows shoppers at most a first name, a city (only if you choose to) and a product, keeps every record scoped to your store, and never sells data.
1. Merchant store data (via OpoShop OAuth)
When you install ShopProof from OpoShop, you authorize it with read-only access to your store: recent orders, products and variant inventory, and live-visitor counts. ShopProof uses this to power its widgets , turning a real recent order into a sales popup, a genuinely low variant count into a "only 3 left" notice, and the number of active visitors into a "12 viewing now" pill. ShopProof never writes to your store and never places, edits, cancels, or fulfills orders.
2. What the recent-sales popup shows about a buyer
ShopProof is built to minimize personal data. When it turns a real order into an on-storefront popup, it shows:
- First name only: never the buyer's full name.
- City, only if you switch it on. It is off for new installs. Never a street address or postcode.
- Product name and, if you choose, its picture.
- A rough time, rounded to the hour ("about 2 hours ago"), never the exact minute.
That is all of it. For example, "Sarah bought the Linen Tote, about 2 hours ago." ShopProof never shows or exposes a full name, email address, phone number, street address, or order value. These popups appear only on the merchant's own storefront, shown to that store's own shoppers, the same place the sale already happened. Nothing is shared with any other store or third party. To avoid showing a shopper the same sale twice, the widget keeps a short list of the popups already shown in that shopper's own browser for the length of the visit (session storage). It holds no personal data about the shopper and is never sent to us.
3. Live viewers, low stock & the shipping bar
The live-viewer count is an aggregate number of anonymous active sessions on the store within a short live window (about 40 seconds), no individual visitor is named or tracked across sites. The low-stock counter reads a variant's real remaining inventory and only appears when stock is genuinely low. The free shipping progress bar is worked out in the shopper's own browser from their cart total and the amount the merchant entered. The countdown counts down to an end date the merchant set. None of these involve card data or shopper identity.
4. No fabricated numbers, ever
ShopProof's core promise is honesty. If there is no real recent order, no popup shows. If a variant isn't actually low, no low-stock notice shows. If nobody is on the store, no viewer count shows. ShopProof never invents sales, inflates viewer counts, or fakes scarcity to pressure shoppers.
5. No payment card data
ShopProof never receives, stores, or has access to payment card details or any billing information.
6. Where data is stored
ShopProof data lives in ShopProof's own dedicated per-store database. Each store's data is isolated and scoped to that store, no store can see another's data. Access tokens are stored securely and used only to read your store's data on your behalf.
7. Impression analytics
ShopProof counts how many times each module was shown (its "impressions") so you can see performance in the dashboard. These counts are anonymous aggregates: a tally per module, never tied to an individual shopper's identity. ShopProof also uses privacy-respecting product analytics (PostHog) to improve the app itself, tagged with a non-identifying store id, never a shopper's personal information.
8. We never sell your data
ShopProof does not sell, rent, or share your store or shopper data with third parties for their own use.
9. Retention & deletion
ShopProof does not keep a copy of your orders. It reads them when a shopper visits and holds the short result (first name, city, product, time) in memory for about a minute. What it stores is your settings, your store's connection, and the daily counts of how often each notice was shown. If you uninstall ShopProof, it stops reading your store. Your settings are kept so a reinstall picks up where you left off, and are deleted on request. To request deletion, email us.
10. Contact
Questions about privacy? Email brandon@tryfound.io.