Privacy Policy

Last Updated: March 2026

    Summary: We collect minimal data and never store customer personal information (PII). 
    We only store usage metadata for analytics and billing purposes.
  

1. Information We Collect

1.1 Shop Information

When you install our app, we collect:

Your shop domain (e.g., yourstore.myshopify.com)
Shopify access token (encrypted and stored securely)
Shop owner email (only for billing and support)
Subscription tier and billing status

1.2 Usage Data (Metadata Only)

We collect metadata only about API usage:

Tool name used (e.g., "searchProducts")
Number of parameters sent (structure only, not actual values)
Number of results returned (count only, not actual data)
Timestamp of request
Your subscription tier

    Important: We do NOT store customer names, emails, phone numbers, addresses, 
    order details, or any other personal information. We only store the structure of requests, 
    not the actual data.
  

1.3 What We Do NOT Collect

❌ Customer personal information (PII)
❌ Order contents or details
❌ Product descriptions
❌ Payment information
❌ End customer behavior or analytics

2. How We Use Your Information

2.1 Service Provision

Authenticate API requests
Connect to your Shopify store
Process tool requests (products, orders, customers)
Enforce tier-based rate limits

2.2 Billing & Subscriptions

Process subscription payments via Shopify
Track usage for billing purposes
Manage upgrades and downgrades

2.3 Analytics & Improvement

Monitor API performance
Identify popular features
Improve service reliability
Detect and prevent abuse

3. Data Storage & Security

3.1 Storage

All data is stored on secure servers
Shopify access tokens are encrypted at rest
Database backups are encrypted
Access logs are retained for 90 days

3.2 Security Measures

HTTPS/TLS encryption for all communications
OAuth 2.0 authentication with Shopify
HMAC validation for webhooks
Rate limiting to prevent abuse
Regular security audits

4. Data Retention

4.1 Active Shops

Shop data: Retained while app is installed
Usage metadata: 90 days rolling window
Billing history: 7 years (legal requirement)

4.2 Uninstalled Apps

When you uninstall the app:

All MCP tokens are deactivated immediately
Shopify access token is retained for 30 days (for reinstalls)
All other data is deleted after 30 days

5. Data Sharing & Third Parties

We do NOT sell your data. We only share data with:

Shopify: For authentication and billing
Cloud hosting provider: For infrastructure (data encrypted)
Payment processor: Shopify handles all payments

6. Your Rights (GDPR)

You have the right to:

Access: Request all data we store about you
Rectification: Correct inaccurate data
Erasure: Request deletion of your data
Portability: Export your data in JSON format
Restriction: Limit how we process your data
Objection: Object to data processing

To exercise these rights, contact us at: support@gold-t.co.il

7. GDPR Compliance

7.1 Legal Basis

We process data based on:

Contract: To provide the service you subscribed to
Legitimate Interest: Analytics and service improvement
Legal Obligation: Tax and billing records

7.2 Data Protection Officer

Contact: support@gold-t.co.il

7.3 Supervisory Authority

You can lodge a complaint with your local data protection authority.

8. Cookies & Tracking

We use minimal cookies:

Session cookie: Required for authentication (deleted when session ends)
No tracking cookies: We don't use Google Analytics or similar

9. Changes to This Policy

We may update this policy. Changes will be posted here with an updated date. Continued use of the app after changes constitutes acceptance.

10. Contact Us

Questions about privacy?

Email: support@gold-t.co.il
Address: Elkavetz 16, Jerusalem, Israel