1. Introduction
Scalebend ("we," "us," or "our") provides a platform that enables Shopify merchants to create and deploy ChatGPT apps for their stores. We are committed to protecting your privacy and handling your data responsibly.
2. Information We Collect
2.1 Account Information
- Email address (for authentication via Clerk)
- User ID and session data
2.2 App Configuration Data
- App names and descriptions
- Shopify store URLs
- Product data analyzed from your Shopify store (titles, descriptions, categories)
- Privacy policy URLs, support email addresses, and developer names
- Style preferences (colors, layout choices)
2.3 Shopify Credentials
- Shopify Admin API access tokens (encrypted at rest)
- Stored securely with AES-256-GCM encryption
3. How We Use Your Information
- App Generation: To create and deploy ChatGPT apps for your Shopify store
- Product Search: To enable product search functionality within your ChatGPT app
- Store Analysis: To generate keywords, categories, and descriptions that improve app discoverability
- Service Delivery: To host and maintain your deployed apps
- Support: To provide customer support and troubleshoot issues
4. Data Storage and Security
- Database: MongoDB (encrypted at rest)
- Credentials: All Shopify access tokens are encrypted using AES-256-GCM before storage
- Authentication: Managed by Clerk (industry-standard security practices)
- Transmission: All data transmitted over HTTPS
5. Data Sharing and Third Parties
We do not sell your personal information. We share data only with:
- Clerk: For authentication services
- MongoDB: For data storage
- OpenAI: Your app metadata is shared with OpenAI when you publish your app to the ChatGPT directory
- Shopify: We access your store data using the credentials you provide
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your data
- Opt out of marketing communications
To exercise these rights, contact us at the email address below.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- All app configurations are deleted
- Encrypted credentials are permanently removed
- Deployed apps are deactivated
- Backups are purged within 30 days
8. Cookies and Tracking
We use essential cookies for:
- Authentication (managed by Clerk)
- Session management
- Security and fraud prevention
We do not use advertising or analytics cookies.
9. Children's Privacy
Our service is not intended for users under 18. We do not knowingly collect data from children.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your own. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or through the platform.