Introduction
At Octolift, operated by Craftshift, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.
By using Octolift, you consent to the data practices described in this policy. If you do not agree with the terms of this privacy policy, please do not use our application.
Information we collect
We collect the following information when you install and use our application:
- Store information: Your Shopify store domain and store profile (store name, Shopify plan, country, timezone, and the store contact details Shopify provides to installed apps).
- Merchant account information: The name and email address of the Shopify user who is logged in, provided by Shopify when you open the app. We use this to contact you about the app and to provide support.
- Product data: Product information from your store (titles, descriptions, images, and related metadata), which we read in order to analyze how well your products are prepared for AI search and answer engines. We write back to a product only when you approve a specific change in the app, and only the fields that change is about: the title, the description, the product category, and category fields you have picked. Every such change is recorded together with the previous value for 30 days, and a title or description change can be undone from the app while the product still holds what was written.
- Aggregate analytics: Totals for the store and for each product from Shopify's reporting API (such as total sales and order counts attributed to AI channels), which we display to you inside the app. These are aggregate numbers only: we never read, store, or display data about individual customers or orders.
- Tracked questions: The shopper questions you choose to track for a product, together with the ranking result of each check.
- Usage data: Information about how you interact with our application, including features used and actions taken.
We do not collect or store personal information about your customers.
How we use your information
We use the information we collect to:
- Provide, maintain, and improve our application and services.
- Analyze your products and generate recommendations. This involves sending your listing
text to an AI model provider on our behalf; see AI model providers below for exactly
what is sent and to whom.
- Show you aggregate performance statistics for AI agent channels (retrieved on demand from Shopify's reporting API and cached briefly; that product's 30-day total is also kept with each title or description change you apply, so the effect of a change can be measured later).
- Send you transactional and lifecycle emails about the app (such as installation and onboarding messages).
- Respond to your comments, questions, and customer service requests.
- Monitor and analyze trends, usage, and activities in connection with our application.
Third party services
We share limited information with the following service providers, solely to operate the application:
- Shopify: Our application operates on the Shopify platform, and certain data is exchanged with Shopify in accordance with their terms and privacy policy.
- Resend: We use Resend to send emails about the app. Your contact email, first name, store domain, Shopify plan, country, whether the store is a development store, the install date and whether the app is still installed are kept as a contact there for this purpose.
- Crisp: We use Crisp to provide support chat inside the app. Your store domain and contact email are shared with Crisp so we can assist you.
- AI model providers (OpenAI, Anthropic and Google): Analysing a listing
and generating suggestions is done by a large language model. To do that we send the
product's title, product type, category, category attribute values and description.
Which provider receives it depends on the model
selected for your store, which you can see and change in the app. We use these providers'
paid API tiers, whose terms state that submitted content is not used to train their
models; their own policies govern that and we advise you to consult them. We never send
customer data, order data or your access tokens to a model provider.
- Hosting providers: Our infrastructure providers process data on our behalf to run the application.
We do not sell your personal information to anyone. This Privacy Policy does not apply to third party services; we advise you to consult their respective privacy policies.
CCPA privacy rights (California residents)
Under the California Consumer Privacy Act (CCPA), California consumers have the right to:
- Request that a business that collects personal data disclose the categories and specific pieces of personal data collected.
- Request that a business delete any personal data collected about the consumer.
- Request that a business that sells personal data not sell the consumer's personal data.
If you are a California resident and would like to exercise any of these rights, please contact us at [email protected].
GDPR data protection rights (EU/EEA residents)
Craftshift is based in the Netherlands and we comply with the General Data Protection Regulation (GDPR). If you are a resident of the European Union or European Economic Area, you have the following data protection rights:
- Right to access: You have the right to request copies of your personal data.
- Right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- Right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to data portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us at [email protected].
Children's information
Octolift does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information through our application, we strongly encourage you to contact us immediately and we will do our best to promptly remove such information from our records.
Data retention
We retain your information for as long as the application is installed on your store. When you uninstall Octolift, your access credentials are invalidated immediately, and we retain remaining data for a reasonable period to allow for reinstallation. When Shopify notifies us that your store data must be redacted, we permanently delete your personal information, including your email address and account details.
Changes to this privacy policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
Contact information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: