Privacy Policy

What data we collect

When you connect your Shopify store, we pull in the following data to answer your questions:

• · Shopify orders (order totals, dates, status)
• · Products (titles, prices, inventory)
• · Customer records (email, order count, total spent)
• · Your store domain

We also collect your email address (used for your account) and basic usage data (which questions you ask, when you log in).

How we use your data

We use your store data for one purpose only: to answer the questions you ask. We run queries against your data and return plain-English answers.

We do not sell your data. We do not share it with third parties. We do not use it to train any models. We do not use it for advertising.

All data is encrypted at rest with AES-256 encryption.

How long we store your data

We keep your store data for as long as your account is active. If you delete your account, all store data — orders, products, customers, and cached answers — is permanently deleted within 24 hours.

Your GDPR rights

If you are in the European Union, you have the following rights:

• · Access: You can request a copy of all data we hold about you.
• · Deletion: You can request that we delete all your data.
• · Portability: You can request your data in a machine-readable format.

To exercise any of these rights, email jj@storeask.co. We will respond within 30 days.

Cookies

We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

Third-party services

We use the following services to run StoreAsk:

• · Supabase — database storage (EU region available)
• · Supabase Auth — authentication and session management
• · Stripe — payment processing
• · Vercel — app hosting

None of these services receive your Shopify order or customer data.

Contact

Questions about this policy? Email jj@storeask.co