Privacy Policy

1. Overview

This Privacy Policy describes how Fexa AI ("the App", "we", "our") collects, uses, and protects data when installed on your Shopify store. We are committed to transparency, data minimization, and full compliance with Shopify's Partner program rules and global data protection regulations (including GDPR).

2. Information We Collect & Process

To provide automated SEO scoring, metadata enhancement, and schema generation, the App accesses:

• Shopify Store Details: Store domain (myshopify.com), primary locale, active languages, and plan type.
• Catalogue Content: Product titles, descriptions, vendor, product types, tags, variants, images, collections, and pages needed to score and generate SEO metadata.
• App Metafields: AI-generated FAQs and structured data written to app-scoped metafields ($app:seo_faq).
• Merchant Account Data: Merchant email address used for web dashboard access and billing confirmation.

4. Artificial Intelligence & Data Grounding

SEO copy is generated using enterprise AI APIs (Google Gemini). Your store catalog data is transmitted securely over TLS for content synthesis only. Your merchant data is never used to train public foundation models.

5. GDPR Compliance & Mandatory Webhooks

We fully support Shopify's automated GDPR compliance protocol:

• customers/data_request: Handled with HTTP 200 (no customer data held).
• customers/redact: Handled with HTTP 200.
• shop/redact: Upon receiving Shopify's shop redaction webhook (triggered ~48h post-uninstall), all associated catalogue caches, suggestions, change sets, and session tokens are permanently erased.

6. Security & Contact

All communications occur over encrypted HTTPS (TLS 1.3). Access tokens are stored encrypted and strictly partitioned by merchant identity.

If you have any questions regarding your data or wish to exercise privacy rights, please contact our data protection team at support@fexaai.com.