Privacy Policy

1. Introduction

AI Conversion Engine ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our Shopify application ("the App").

Data Controller / Legal Entity: AI Conversion Engine Ltd.
Registered address: [REPLACE WITH LEGAL ADDRESS]
Contact: privacy@aiconversionengine.com

When a merchant installs the App, the merchant is the controller of personal data relating to their store visitors and customers, and we act as a processor on their behalf under a Data Processing Agreement (DPA, see section 11). For visitors of merchant storefronts, the merchant's own privacy policy applies in addition to this one.

2. Information We Collect

We collect the following types of information:

• Session Data: Anonymous browsing sessions, page views, and navigation patterns
• Event Data: Add to cart, checkout initiation, and purchase events
• Customer Data: Email, name (when provided through Shopify webhooks for logged-in customers)
• Device Information: Browser type, device type, operating system
• Geographic Data: Country and city based on IP address (IP is not stored)

3. How We Use Your Information

We use the collected information to:

• Provide real-time analytics and insights to store owners
• Power conversion optimization features (exit intent detection)
• Generate aggregated reports and dashboards
• Improve our services and develop new features

4. Data Retention

We retain event and session data for a maximum of 90 days by default. Store owners can configure custom retention periods in their settings. After the retention period, data is automatically deleted.

5. Data Sharing & Sub-processors

We do not sell, trade, or rent personal information to third parties. Data is shared only with: (a) the Shopify merchant who installed the App, (b) Shopify itself (as the platform we integrate with), and (c) the sub-processors listed below, each bound by a data processing agreement.

All sub-processors operate under confidentiality obligations and EU-compliant safeguards. International transfers, where applicable, rely on Standard Contractual Clauses (SCCs) or an equivalent lawful transfer mechanism.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Object: Object to certain processing of your data

To exercise these rights, please contact the store owner or reach out to us directly.

7. Cookies and Tracking

Our tracker uses first-party cookies to maintain session continuity. We use a fingerprinting technique to recognize returning visitors. No third-party tracking cookies are used. Store owners can enable consent gating to respect visitor preferences.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), secure data storage, and access controls. Our infrastructure is hosted on secure cloud platforms with regular security updates.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@aiconversionengine.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Data Processing Agreement (DPA)

When you install the App, the Shopify Partner Program Agreement and our Data Processing Agreement apply automatically. A copy of the DPA is available on request at legal@aiconversionengine.com. The DPA sets out the subject-matter and duration of processing, the nature and purpose of processing, the type of personal data, the categories of data subjects, and the security measures we apply.

12. International Data Transfers

Our primary infrastructure is located in the European Union. Where data transfers outside the EU/EEA are necessary (for example, Shopify operates in Canada and the US), we rely on EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Visitors from the EEA have the right to obtain a copy of the safeguards we use; contact privacy@aiconversionengine.com.