Data and privacy

← Back to documentation

This page explains, in plain terms, what the app asks permission for, what leaves your store and where it goes, what is kept, and what happens when you uninstall. The privacy policy is the formal version.

The permissions the app asks for

Permission	Why Octolift needs it
View and edit products	Read everything the analysis looks at (title, description, type, category and its fields, variants, media, availability), and write the title, description, category and category fields you approve. Editing covers reading; nothing is written without your approval.
View and edit metaobjects	Category field values in Shopify are entries in its taxonomy; when you pick a value a store does not have yet, Octolift creates that entry so the field can be set.
View metaobject definitions	To find out which entry type a category field uses, so the value above can be written to the right place.
View reports	To read the aggregate sales Shopify attributes to AI assistants, for the Agentic sales cards. Aggregate totals only, never individual orders or customers.

What leaves your store

Analysing a listing and writing suggestions is done by a large language model at one of three providers: OpenAI, Anthropic and Google. Which one receives a request depends on the model in use, which Octolift chooses rather than you (we may pin a different one for a single store while we are looking into something for it). What is sent:

• The product's title, product type, category, category field values and description (its first part when very long), with the word count.
• For the category audit: the names of the category's attributes, their current values and the values Shopify allows.
• For suggestions: the gaps found by the scan and the candidate categories, so the model writes for the checks.

We use these providers' paid API tiers, whose terms state that submitted content is not used to train their models. The shopper questions and their rankings go to Shopify's global AI catalog, which is Shopify's own service, and the sales totals come from Shopify's analytics.

What is stored

• Store profile: the store domain, name, plan, country and currency, plus the contact details Shopify gives installed apps, so we can run the app and support you.
• Your account: the name and email of the store owner, captured when they open the app. It is what identifies you in the support chat and what the Resend contact is keyed on, and it is where our emails go until you set notification addresses.
• Notification addresses: up to five email addresses you set on the Settings page. Every email Octolift sends you goes to them; until you set any, it goes to the store email. Staff members who open the app are recognised for the chat but not stored.
• Scores: the last score of each analyzed product, with the previous one, so the Products page can show them.
• Profile links: if you add profile links (the social and review page addresses of your store) on the Settings page, they are stored with your store's Octolift settings and published on your own home page, as the links that tell an assistant which accounts are yours. You can remove any of them there at any time.
• Change history: for every change you apply, the field, the previous value, the new value, the suggestion it came from and whether you edited it. This is what the undo uses. It is kept for 30 days and then deleted.
• Your questions: the questions you ask on the AI rankings page, per country, with the rank and the winning listing at the time of each check.
• Generated shopper questions: each time the model writes shopper questions for a product and country, the product title, the country and the questions it wrote, so the Activity page can list it. It is kept for 30 days and then deleted.
• Usage: which products your plan covers, how many of its questions you have used, and the size and cost of each model request, without its content.
• A snapshot of that product's 30-day agentic sales (orders and revenue) at the moment you apply a title or description change, so the effect of a change can be measured later.

Results such as scan verdicts, the shopper questions and the sales totals are cached for a while (from an hour up to 30 days) so that reopening a product is quick and does not repeat work.

What is never read or sent

• Individual customers or orders. Octolift only reads aggregate sales totals.
• Your Shopify access tokens, customer data or order data to any model provider.
• Anything to an advertising or tracking network. There is no analytics script in the app.

Emails you receive

All from Octolift at notifications.craftshift.com: a welcome email on your first install, a short goodbye when you uninstall, a notice when AI rankings are paused for your store and your weekly checks stop until they resume (at most once a month), and, only if you rate the app inside it, either a personal note from us after a low rating or a single request to review on the App Store the day after five stars. They go to the notification addresses you set on the Settings page (up to five), or to your store email until you set any. Reply to any of them to reach us. Support chat runs on Crisp (which receives your store domain and contact email so we can help you), and the emails are sent through Resend (which holds a contact with your email, first name, store domain, Shopify plan, country, whether the store is a development store, the install date and whether the app is still installed). Both are listed in the privacy policy.

Uninstalling and deletion

• Immediately: Octolift's access to your store is revoked and all processing stops. Nothing you applied is reverted; that content is your own product content and stays exactly as it is.
• About 48 hours later: Shopify sends the request to erase your store's data and we delete the scores, the change history, the tracked questions, the generated shopper questions and your contact details. Two things are kept because they are billing records: how much each period used, and the list of product ids your plan has covered, which is what stops a plan being refilled by uninstalling. Neither carries personal data or any of your product content.
• Reinstalling before that erasure brings your history back. After it, the scores and history are gone and you start fresh, except for the products your plan has already covered: those stay covered, so you keep them rather than paying for them twice.

To exercise a data request under GDPR or CCPA, or to ask anything about this page, email [email protected].

Related guides