Privacy Policy

AI FAQ Builder ("we", "our", or "us") is a Shopify application that helps merchants create, manage, and publish AI-generated FAQ sections for their online stores. This Privacy Policy explains what information we collect when you install and use our app, how we use that information, and the choices you have.

By installing AI FAQ Builder from the Shopify App Store, you agree to the practices described in this policy.

Shop & Account Data

• Shop domain — your myshopify.com address, used to identify your account.
• Shopify plan & billing status — to determine your feature tier (Free / Pro).
• App access token — issued by Shopify during OAuth; required to perform API calls on your behalf.

Product Data (AI Generation Only)

• Product titles, descriptions, tags, variants, and SEO fields from your Shopify store.
• This data is fetched on-demand when you click "Generate with AI" and is sent to our AI provider to produce FAQ content.
• Product data is not stored on our servers after generation completes.

FAQ Content

• FAQ widget titles, questions, answers, and display settings you create in the Builder.
• Published/draft status and publish timestamps.
• Storefront view and click analytics (aggregated counts only — no visitor PII).

AI Usage Metrics

• Number of AI prompts used per billing cycle per shop, to enforce plan limits and calculate overage charges.

Technical & Log Data

• Server-side error logs (no personal data, used for debugging).
• Shopify webhook events (app/uninstalled, app/scopes_update).

We integrate with the following services to operate the app:

Shopify

Your store data is accessed via the Shopify Admin API under the scopes read_products and write_products. Shopify's own Privacy Policy governs data held on their platform.

Anthropic (Claude AI)

When you generate FAQs, your product data and AI configuration are sent to Anthropic's API to produce FAQ content. Anthropic does not use this data to train models. See Anthropic's Privacy Policy.

MongoDB Atlas

FAQ content, AI usage metrics, and shop settings are stored in a MongoDB Atlas cluster. Data is encrypted at rest and in transit. See MongoDB's Privacy Policy.

We do not sell, rent, or trade your personal or business data to any third party.

We share data only in these limited circumstances:

• Service providers listed above (Anthropic, MongoDB) — only as necessary to operate the app.
• Legal requirements — if required by law, court order, or to protect our legal rights.
• Business transfer — if we are acquired or merge, your data may transfer as part of that transaction. You will be notified in advance.

We implement industry-standard measures to protect your data:

• All data in transit is encrypted with TLS 1.2+.
• Data at rest in MongoDB Atlas is encrypted using AES-256.
• Shopify access tokens are stored server-side only and never exposed to the browser.
• Access to production data is restricted to authorised personnel only.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please contact us immediately at the address below.

Depending on your location, you may have the following rights regarding your data:

• Access — request a copy of the data we hold about your store.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of all your data. Uninstalling the app triggers automatic deletion within 30 days.
• Portability — request your FAQ content in a machine-readable format.
• Restriction — request that we restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interest.

The AI FAQ Builder admin interface runs embedded inside Shopify Admin and does not set first-party cookies independently. Shopify may set session cookies as part of the embedded app authentication flow — these are governed by Shopify's cookie policy.

The FAQ storefront widget (injected into your theme) does not set cookies on your customers' browsers. It records anonymous view and click counts server-side only.

AI FAQ Builder is a business tool intended for Shopify merchants and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes, we will notify you via a banner in the app or an email to the address associated with your Shopify account. Your continued use of AI FAQ Builder after the effective date constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out: