Privacy Policy

Overview

InsyteLayer ("we", "us", "our") provides a Shopify app that generates AI-assisted product opinions, localizes that content for storefront languages, and lets merchants collect product-level shopper feedback. This policy explains what information we collect, how we use it, and what rights merchants and storefront visitors may have.

Information We Collect

• From your Shopify store: shop domain, access token and granted scopes, basic shop details Shopify makes available to the app, locale information, and install or uninstall events.
• Merchant app data: language settings, custom prompts, rating and opinion configuration, generated opinion content, regeneration job payloads and status, subscription state, and usage records.
• Product data: product IDs, titles, descriptions, vendor names, product types, tags, image URLs, and related catalog information used to generate opinions.
• Storefront feedback data: product vote choice, timestamps, a pseudonymous customer identifier when Shopify provides a logged-in customer ID, or a signed first-party anonymous voter token when no customer is logged in.
• Technical and security data: request metadata, limited logs, and hashed IP-derived signals used only for abuse prevention and rate limiting. We do not persist raw IP addresses for vote tracking.
• What we do not intentionally collect: customer names, postal addresses, or customer email addresses as part of opinion generation or anonymous voting.

How We Use Information

• To authenticate with Shopify and access the store data required to provide the app.
• To generate product opinions, scores, pros, cons, and localized variants based on merchant product data and product imagery.
• To save merchant settings, support background regeneration jobs, and keep storefront opinion data current.
• To record shopper votes, maintain aggregate helpful or unhelpful counts, and reduce spam or abuse.
• To manage billing, subscription status, service operations, support, reliability, and legal compliance.

AI Processing

To generate opinions, we send selected product information and product image URLs to our AI service provider, OpenRouter, which routes requests to supported language and vision models. We configure this flow to generate structured product opinion content and do not intentionally send Shopify customer personal data to the AI provider for this purpose.

Legal Basis

We process data to perform our contract with merchants by operating the app, and for our legitimate interests in maintaining, securing, improving, and supporting the service. Where applicable law requires it, merchants remain responsible for obtaining any storefront notices or consents relevant to their own customer relationships.

Data Retention

We retain shop connection details, settings, generated content, subscription records, and related operational data while the app is installed and as needed to provide the service. Vote records and associated pseudonymous identifiers are retained while needed for the feature and are deleted or redacted in response to applicable Shopify compliance events. When the app is uninstalled, we delete shop-related data in line with Shopify compliance webhook requirements and our internal retention procedures.

Sharing

We do not sell personal data. We may share limited information with service providers that help us operate the app, including hosting, infrastructure, billing, and AI processing providers, under appropriate safeguards. We may also disclose information when required by law, to enforce our terms, or to protect our rights, merchants, or users.

Security

We use administrative and technical safeguards designed for this app, including scoped Shopify access, signed voter cookies, pseudonymization of logged-in customer vote identifiers, HMAC verification for Shopify compliance requests, and access controls intended to reduce unauthorized access or abuse.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data. Merchants can submit privacy-related requests through Shopify where applicable, and we respond to those requests in accordance with Shopify platform requirements and applicable law.

Shopify Compliance

We support Shopify privacy compliance workflows for customer data requests and redaction. That includes handling Shopify compliance topics for customer data access, customer redaction, and shop redaction, and validating incoming requests before processing them.

Company Details

• Company: Digitasodas MB
• Company ID: 305676811
• Country of registration: Lithuania
• Contact email: [email protected]

Contact

Questions about this policy or our data practices can be sent to [email protected].