Privacy Policy
Bulk AI Products Optimizer (the "App") is a Shopify app.
Data we process
- Your shop domain.
- Product catalog data we read through the Shopify Admin API (titles, descriptions, product types, vendors, tags, categories, attributes, variants and metafields).
- The Shopify staff user id of the person using the App.
- Only if you allow report access (an optional permission): totals from your Shopify Analytics reports for visits, orders and sales that Shopify attributes to AI channels, and the titles of the products sold. These totals are read each time you view them and are not stored.
We do not collect or store your customers' personal data. The App does not read customer or order records. Shopify classifies its reports permission as access to protected customer data, so the App asks for it only when you choose to see AI channel results.
Why we process it
- To audit your catalog and to preview, apply and roll back bulk improvements to product category and attribute data.
- To run AI classification and attribute extraction on product text.
- To operate, secure and support the App.
Sub-processors
- Anthropic (AI processing). We send product titles, product types, vendors, descriptions and the values of your custom (non-Shopify) product metafields, plus category and attribute names (no tags, no customer personal data) so a model can suggest a category and extract attributes. Anthropic processes this data in the United States and retains and uses it according to its commercial terms; we do not permit it to be used to train models on your data.
- Amazon Web Services (application hosting and job queue), United States.
- Neon (database), United States (AWS us-east-1).
Retention
- A completed change can be rolled back for 30 days after it is applied; after that it expires.
- Audit results are deleted after 30 days. Per-product job records are deleted after 90 days; only job summaries and counters are kept.
Deletion
When you uninstall the App we stop all work and delete your sessions immediately. Shopify then sends us a shop/redact request, typically 48 hours after uninstall, and we delete all remaining data for your shop within 48 hours of receiving it. You can also email us to request deletion.
Data processing terms
These terms form the data processing agreement between you (the merchant who installs the App) and Polar Bear Commerce, the developer of the App. By installing or using the App you agree to them.
- Definitions. "Personal data" means information that identifies or can be linked to a person, such as your customers or store visitors. "Processing" means any operation on that data, including reading, using, storing or deleting it.
- Roles. You are the controller of your store data and of any personal data in it. We process data only as your processor, on your behalf and on your instructions, which are given by installing the App, choosing its features and the actions you take in it.
- Scope. We process only the data listed under "Data we process", for the purposes listed under "Why we process it". We do not sell personal data, use it for advertising, or use it for any other purpose.
- Security and confidentiality. Data is encrypted in transit and at rest. Access to production systems is limited to authorised staff, who are bound by confidentiality, and is logged.
- Sub-processors and transfers. We use only the sub-processors listed above, which process data in the United States under their own data protection terms. We will update this page before adding a new sub-processor.
- Customer requests. We respond to Shopify's customer data request and customer redaction requests. The App does not store your customers' personal data, so these requests normally find nothing to return or delete.
- Security incidents. If we become aware of a security incident affecting your data, we will notify you without undue delay and help you meet your own notification obligations.
- Retention and deletion. We keep data only for the periods under "Retention" and delete it as described under "Deletion".
Contact
Questions or requests: support@REPLACE-ME.example.