Privacy Policy

Last updated: May 4, 2026

ShelfCopy ("we", "us") provides AI-generated product copy for Shopify merchants. This policy describes the data we collect when a merchant installs ShelfCopy, why we collect it, and how it is handled.

What we collect

Shop identity: Shopify domain (e.g. example.myshopify.com), shop email, owner name, language, and timezone — provided automatically by Shopify during install.
Product data: titles, descriptions, vendor, product type, tags, variants, images, and existing meta tags. Sent to our copy-generation engine when you click Generate.
App usage: generation history (timestamps, product IDs, token counts, cost), bulk-job status, and your brand-voice preferences.
OAuth session: a Shopify-issued access token, stored encrypted at rest, used only to read your products and write back the copy you approve.

What we do NOT collect

We do not collect customer data — no shopper names, addresses, orders, payment info, or browsing behavior. ShelfCopy does not request scopes that would give us access to it.
We do not sell or share your data with advertisers.

How we use it

To generate product copy via Anthropic's Claude API. Product data is sent to Anthropic for inference. Anthropic's privacy policy.
To bill you via Shopify's Billing API.
To send you transactional emails (install confirmation, billing receipts, support replies).
To debug errors in our service (we log failures with shop domain and product ID; we do not log full product data).

Data retention

While your app is installed: we retain your generations, settings, and OAuth session.
When you uninstall: Shopify sends us an app/uninstalled webhook. We immediately delete your OAuth session.
48 hours after uninstall: Shopify sends a shop/redact webhook. We delete all remaining shop-scoped data (settings, generation history, bulk jobs).

Your rights

You may request a copy of any data we hold about your shop, or request its immediate deletion, at any time by emailing privacy@shelfcopy.com. We respond within 30 days.

Subprocessors

Anthropic, Inc. — Claude API for copy generation.
Shopify, Inc. — OAuth, Admin API, Billing.
Cloudflare, Inc. — DNS, edge proxy, marketing-site hosting.
Fly.io — application hosting.

Changes to this policy

If we change how we handle data materially, we'll email the shop owner and update the date at the top of this policy. Continued use after a change means you accept the new terms.

Contact

privacy@shelfcopy.com