Privacy Policy

1. Who this policy covers

• Merchants: Shopify store owners and their staff who install and use the App.
• Store visitors: people who browse a merchant’s online store where the merchant has switched on the Kepvia tracking app embed.

For store visitor data, the merchant is the data controller and we act as the merchant’s data processor. For merchant account data, we are the data controller.

2. Information we collect

2.1 Store information from Shopify

When you install the App, Shopify gives us access to your store through the permissions you approve. We collect:

• Store details: store name, myshopify domain, primary domain, store owner email address, currency, plan type and whether the store is a development store.
• Store content: products (titles, descriptions, SEO titles and meta descriptions, tags, vendor, product type, status, variants, prices, SKUs and stock levels), collections, pages, blog posts, navigation menus, files and product images.
• Orders, reduced to product totals: we read orders only to count views, purchases and revenue per product for Analytics and A/B tests. We do not store customer names, email addresses, phone numbers or postal addresses from orders.
• Inventory and locations: used only when you edit stock in the App.

The App does not request access to Shopify customer records.

2.2 Information you enter in the App

• Settings, such as automation rules, AI tone, brand voice, banned words, image quality and ALT text templates.
• Product facts you add (for example, materials or warranty) so AI can write accurately.
• A/B tests, redirects and edits you make.
• Your storefront password, if your store is password protected. We store it encrypted and use it only to let our scans open your storefront.

2.3 Store visitor information (only when the merchant turns on the Kepvia tracking app embed)

The tracking script measures page speed and A/B tests. It collects:

• A random visitor ID stored in the visitor’s browser (localStorage), used to link a visitor’s A/B test views to their own orders.
• Page speed measurements (Core Web Vitals), page type and page path.
• Product views, add-to-carts and checkouts started.
• Browser family, device type and country (two-letter code from our CDN).

We do not collect visitor names, email addresses or IP addresses through the tracking script, and we do not use it for advertising or to track visitors across other websites.

2.4 Usage and technical information

• Logs of actions in the App (an audit log of changes, rollbacks and failures).
• Usage counts for billing limits (AI suggestions, image optimizations, scans).
• Technical logs needed to run, secure and debug the App.

3. How we use information

We use information only to provide and improve the App:

• Audit and site check: score your products, collections, blog posts and pages, and check your live storefront for SEO issues.
• AI optimizer: write SEO titles, meta descriptions, product descriptions, titles, image ALT text and image file names.
• Images: compress and resize images, keep a copy of each original so you can restore it, and write ALT text and file names.
• SEO tools: page speed scans, broken link scans, redirects, llms.txt, HTML sitemap page and structured data (JSON-LD).
• Analytics and A/B tests: show traffic, sales and before-and-after results, and split visitors between versions.
• History and undo: keep earlier versions of everything the App changes, so you can restore them.
• Billing: apply plan limits and process subscriptions through Shopify.
• Support and communication: answer your questions, and send service emails such as a welcome email on install and a confirmation on uninstall.
• Security: prevent abuse and keep the App and your data safe.

We do not sell your data, and we do not use your store data to train AI models.

4. AI processing

When you ask the App to write text, we send the content needed for that task to an AI provider. This is the item’s title, description, product type, vendor, tags, options, image details and the facts you added, plus your AI settings. We do not send prices or customer data to AI providers. AI output is checked by the App before you can apply it, and nothing is applied to your store unless you approve it or turn on an automation setting that allows it.

5. How we share information

We share information only with service providers that help us run the App, and only as needed:

We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a merger or sale of our business, in which case this policy continues to apply.

6. Data retention

• We keep store data while the App is installed.
• Visitor speed events are deleted after 30 days, product metrics after 120 days, and page speed scans after 180 days.
• When you uninstall the App, we stop all processing and delete our access token for your store immediately.
• About 48 hours after uninstall, Shopify asks us to erase your store’s data. We then delete your store’s data from our database, including stored original and optimized images.
• Backups of our systems may keep data for a short time before they are overwritten.

Changes the App made to your store (such as product text, optimized images, redirects or a published HTML sitemap page) remain in your store after uninstall, because they are your store’s content.

7. Your rights

Depending on where you live, including under the GDPR and the CCPA, you may have the right to access, correct, delete, export or restrict the use of your personal information, and to object to processing. To use these rights, contact us at [email protected].

Store visitors should contact the merchant whose store they visited. We respond to Shopify’s customer data request and customer redaction webhooks. Because the App does not store customer personal data, these requests usually need no further action from us.

We do not sell or share personal information for cross-context behavioral advertising.

8. International transfers

We and our service providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Security

We use encryption in transit (HTTPS), encrypt sensitive values such as your Shopify access token and storefront password, restrict staff access, and log every change the App makes. No method of storage or transmission is completely secure, but we work to protect your data.

10. Children

The App is for businesses and is not directed at children under 16. We do not knowingly collect children’s personal information.

11. Changes to this policy

We may update this policy. If we make significant changes, we will notify you in the App or by email before they take effect. The date at the top shows when it last changed.

12. Contact us

TODO_LEGAL_ENTITY_NAME
Email: [email protected]
Website: https://kepvia.com