Privacy Policy

Privacy Policy

Last Updated: January 29, 2026

Introduction

AI Metafield Autopilot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify app.

Information We Collect

We collect the following information from your Shopify store:

  • Shop Information: Store domain (e.g., yourstore.myshopify.com), shop ID (unique identifier), app installation status
  • Product Information: Product IDs, product titles, product descriptions, product tags, vendor names, product types, product variants (for analysis purposes)
  • Metafield Data: Metafield definitions (namespace, keys, types), existing metafield values (read for analysis), metafield values written by the app (when you apply suggestions)
  • Job and Analysis Data: Analysis job history, analysis results (AI-generated suggestions), apply job history, apply results (products processed, metafields written), job status and progress
  • Settings and Preferences: Enabled metafield keys, confidence threshold, custom metafield key definitions, onboarding status
  • Billing Information: Subscription status, plan type, usage statistics (for rate limiting and plan limits)
  • Session Data: Authentication tokens (OAuth session tokens), session IDs, session expiration timestamps

What We Do NOT Collect: We do not collect customer information, order data, payment information, or any data outside of what is necessary to provide the metafield analysis and application service.

How We Use Your Information

We use the collected information for the following purposes:

  • AI Analysis: To generate metafield suggestions using artificial intelligence
  • Service Delivery: To provide, maintain, and improve our app functionality
  • Job Processing: To track and manage analysis and apply operations
  • Support: To respond to your inquiries and provide customer support

AI Technology and Third-Party Services

AI Service Provider: We use OpenAI's API (or a configurable AI endpoint) to analyze your product data and generate metafield suggestions. When you use the analysis feature, we send product information (titles, descriptions, tags, vendor) to the AI service provider.

Data Sent to AI: Only the product information necessary for analysis is sent to the AI service. This includes product titles, descriptions, tags, vendor names, and product types. We do not send customer information, order data, or financial information to the AI service.

AI Data Retention: We do not control how the AI service provider retains or uses your data. Please review OpenAI's privacy policy (or your configured AI provider's policy) for information about their data practices. We recommend using AI services that do not use your data for training purposes.

Third-Party Services: We use Shopify's infrastructure for app hosting and data storage. Your data is stored in databases managed by our hosting provider (Fly.io or similar). We do not share your data with other third parties except as necessary to provide the service.

Data Storage and Retention

Storage Location: Your data is stored in secure databases hosted by our infrastructure provider. Analysis results and job history are stored in your Shopify store's database (via our app's database).

Retention Period: We retain your data for as long as your app is installed and active. When you uninstall the app, we delete all shop-scoped data including:

  • Analysis batches and results
  • Apply batch history
  • Shop settings and preferences
  • Session data
  • Job records

Data Deletion: You can request data deletion at any time by uninstalling the app or contacting support. We will delete your data within 30 days of your request.

Your Rights (GDPR, CCPA, and Other Privacy Laws)

Depending on your location, you may have the following rights:

  • Right to Access: Request a copy of the data we hold about you
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Data Portability: Request your data in a machine-readable format
  • Right to Object: Object to processing of your data

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure database storage with access controls
  • Authentication and authorization mechanisms
  • Regular security audits and updates

Children's Privacy

Our app is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: support@jbprovider.com

Support Page: Visit Support