Privacy Policy

This Privacy Policy explains how Stats Marketing LLC ("we", "us", "our") collects, uses, and protects information in connection with the AI Ready — Catalog IQ application ("the App") available on the Shopify App Store. By installing and using the App, you agree to the practices described in this policy.

1. Who we are

Stats Marketing LLC
Website: https://stats.marketing
Contact for privacy inquiries: todd@stats.marketing

2. What data we collect

When you install and use the App, we collect and store the following categories of data:

Shop and account data

• Your Shopify shop domain (e.g. your-store.myshopify.com)
• OAuth access tokens issued by Shopify (encrypted at rest)
• Subscription plan, credit usage counters, and billing identifiers
• Installation and uninstallation timestamps

Product catalog data

• Product titles, descriptions, product types, vendors, tags
• Product metafields (standard Shopify fields)
• Product image URLs and alt text
• Product variant SKUs and barcodes (GTINs)
• SEO titles and descriptions

Activity and analytics

• Audit results, AI-readiness scores, and scoring dimensions
• A log of AI actions performed (description rewrites, metafield populates, alt text generations) including before/after values
• Error logs for debugging purposes

What we do NOT collect

We do not collect or store personal information about your customers (names, emails, addresses, orders, payment details). The App operates only on your product catalog data.

3. How we use this data

We use the collected data exclusively to:

• Provide the features of the App (audit your catalog, score products, apply AI fixes)
• Generate improved descriptions, metafield values, and image alt text using AI services
• Calculate usage against your subscription plan limits
• Communicate with you about your account, billing, and service updates
• Debug and improve the App's functionality
• Comply with legal obligations

4. AI processing and third-party services

The App uses Anthropic's Claude AI service to generate product content improvements. When you invoke an AI action, relevant product data (title, description, existing metafields, product type) is sent to Anthropic's API for processing. Anthropic processes this data as a subprocessor and does not retain it for training purposes under their API data policy.

Other subprocessors include:

• Shopify Inc. — payment processing (via Shopify Billing API), data source
• Anthropic, PBC — AI content generation
• Bluehost / Newfold Digital — application hosting infrastructure

5. Data sharing and disclosure

We do not sell, rent, or trade your data. We share data only with:

• The subprocessors listed above, as necessary to provide the service
• Law enforcement or regulatory authorities when legally required
• Successors in the event of a business transfer (you'll be notified)

6. Data retention

• While the App is installed, we retain your data to provide the service.
• When you uninstall the App, your access tokens are immediately revoked.
• 30 days after uninstall, or upon Shopify's shop/redact compliance webhook, all data associated with your shop is permanently deleted from our systems, including database records, audit logs, and scored product data.
• Anonymized aggregate statistics (e.g. "AI generated X million words") may be retained indefinitely with no connection to your store.

7. Security

We take reasonable technical and organizational measures to protect your data:

• All communications are encrypted via HTTPS (TLS 1.2+)
• OAuth access tokens are stored in a database protected by authentication and are never exposed to frontend JavaScript or logs
• Access to production infrastructure is restricted to authorized personnel
• We monitor for suspicious activity and investigate security incidents promptly

No method of transmission over the internet is 100% secure. If we become aware of a breach affecting your data, we will notify you without undue delay.

8. Your rights (GDPR, CCPA, and similar laws)

Depending on your location, you may have the right to:

• Access — request a copy of the data we hold about your shop
• Correction — request corrections to inaccurate data
• Deletion — request deletion of your data (typically by uninstalling the App)
• Portability — request a machine-readable copy of your data
• Restrict or object to certain processing

To exercise any of these rights, email todd@stats.marketing with the subject line "Privacy Request — [your shop domain]". We will respond within 30 days.

Shopify also provides automated data request and deletion flows via its customers/data_request, customers/redact, and shop/redact webhooks, which we honor.

9. Children's privacy

The App is a B2B service intended for Shopify merchants. It is not directed at children under 13, and we do not knowingly collect data from children.

10. International transfers

Our infrastructure is based in the United States. If you access the App from outside the US, your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the App, you consent to this transfer.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the merchant admin email on file, or via an in-app notice. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions about this policy or our data practices?
Email: todd@stats.marketing
Website: https://stats.marketing