Privacy Policy

1. Introduction

Welcome to InkBot ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

By installing and using InkBot, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Store Information

When you install InkBot, we collect:

• Your Shopify store domain (e.g., your-store.myshopify.com)
• Store owner email address
• Store name and basic store information

2.2 Product Information

To generate product descriptions, we access:

• Product titles and names
• Product types and categories
• Product features and attributes you provide
• Existing product descriptions (when applying generated content)

2.3 Usage Data

We automatically collect:

• Number of descriptions generated
• Generation history and timestamps
• Selected niches, tones, and languages
• SEO scores of generated content

2.4 Brand Voice Settings

If you configure brand voice settings, we store:

• Preferred tone and writing style
• Target audience information
• Keywords to include or avoid
• Brand values and custom prompts
• Sample texts for voice analysis

2.5 Support Communications

When you contact support, we collect:

• Your email address
• Support ticket content and subject
• Any attachments or additional information you provide

3. How We Use Your Information

We use the collected information to:

• Provide our services: Generate AI-powered product descriptions and SEO content
• Improve our app: Analyze usage patterns to enhance features and user experience
• Process payments: Manage subscriptions and billing through Shopify's Billing API
• Communicate with you: Respond to support requests and send important updates
• Ensure security: Detect and prevent fraud or unauthorized access
• Comply with legal obligations: Meet regulatory and legal requirements

4. Third-Party Services

We use the following third-party services to operate InkBot:

4.1 AI Processing (OpenRouter / DeepSeek)

Product information you provide is sent to AI services for description generation. This data is processed in accordance with their privacy policies and is not stored by these services beyond the generation request.

4.2 Database (Neon PostgreSQL)

Your data is securely stored in Neon's serverless PostgreSQL database with encryption at rest and in transit.

4.3 Hosting (Vercel)

Our application is hosted on Vercel's secure infrastructure with automatic HTTPS and DDoS protection.

4.4 Email (Resend)

Support ticket notifications are sent via Resend's email service.

4.5 Payments (Shopify Billing API)

All payment processing is handled directly by Shopify. We do not store any payment card information.

5. Data Retention

We retain your data as follows:

• Account data: Retained while your app is installed, deleted within 30 days of uninstallation
• Generation history: Retained for 12 months for your reference
• Support tickets: Retained for 24 months for quality assurance
• Usage statistics: Aggregated and anonymized data may be retained indefinitely

6. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encryption at rest for stored data
• Secure OAuth 2.0 authentication via Shopify
• API key hashing using SHA-256
• Regular security audits and updates

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (uninstalling the app will trigger automatic deletion)
• Data portability: Request your data in a machine-readable format
• Withdraw consent: Uninstall the app at any time to stop data collection

To exercise these rights, please contact us at the email address below.

8. Children's Privacy

InkBot is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: starbowshine@gmail.com
• Support: Use the in-app Support page