Privacy Policy

1. Information We Collect

When you install and use PricePilot AI, we collect only the data necessary to provide our price tracking service:

• Shop domain: Your myshopify.com domain, used to identify your store and authenticate API requests.
• Product data: Product titles, IDs, and current prices for products you choose to track — sourced from Shopify's API with your permission.
• Competitor URLs: URLs of competitor product pages that you manually add or that our discovery engine finds automatically.
• Price snapshots: Historical price data scraped from competitor product pages, stored over time to enable trend analysis.
• Your own price snapshots: Periodic records of your product's prices, used to generate pricing recommendations.
• App configuration: Settings such as notification preferences, scan frequency, and subscription plan.

We do not collect, access, or store:

• Customer names, emails, addresses, or any personal data of your store's customers
• Order history or transaction data
• Payment card or billing information
• Any Shopify scopes beyond read_products and read_inventory

2. How We Use Information

We use the information we collect for the following purposes:

• Price tracking: Automatically scanning competitor product pages at scheduled intervals to capture current prices.
• Price history charts: Displaying historical competitor and your own price trends on the product detail dashboard.
• AI pricing recommendations: Sending price data to our AI provider (Anthropic) to generate advisory pricing suggestions for your products.
• Email notifications: Sending you alerts when significant competitor price changes are detected, or when recommendations are ready.
• Service improvement: Aggregate, anonymized usage patterns may be used to improve app features and reliability.

3. Third-Party Services

PricePilot AI integrates with the following third-party services to deliver its functionality. Each provider has its own privacy policy governing how they handle data:

• Shopify: We access your store data via the Shopify Admin API using OAuth. Data use is governed by the Shopify Privacy Policy.
• Apify: We use Apify's web scraping infrastructure to retrieve publicly accessible competitor product pages and extract pricing data. Apify processes only public webpage content on our behalf. See the Apify Privacy Policy.
• Anthropic (Claude AI): Competitor price data and your product data are sent to Anthropic's API to generate pricing recommendations. We do not send any personal customer data. See the Anthropic Privacy Policy.
• Resend: We use Resend to send transactional email notifications. Your email address (as merchant contact) is processed by Resend solely to deliver notifications you have opted into. See the Resend Privacy Policy.
• Railway: Our application and PostgreSQL database are hosted on Railway's cloud infrastructure in secure data centers. See the Railway Privacy Policy.

We only share data with these providers to the extent necessary to provide the service. We do not sell your data to any third party.

4. Data Retention

We retain your data for as long as you have PricePilot AI installed on your Shopify store:

• While the app is installed: All tracked products, competitor URLs, price snapshots, and AI recommendations are retained to provide ongoing service.
• Upon uninstall: When you uninstall PricePilot AI, we automatically delete your shop data — including all tracked products, competitor URLs, price history, and AI recommendations — within 30 days of the uninstall event.
• Aggregate data: Anonymized, aggregated usage statistics that cannot be linked back to your store may be retained indefinitely for product analytics.

You may request earlier deletion of your data by contacting us at privacy@pricepilotai.com.

5. Security

We take reasonable technical and organizational measures to protect your data:

• All data is transmitted over HTTPS/TLS.
• Database connections use encrypted channels.
• Shopify access tokens are stored using Shopify's official session storage mechanism.
• We do not log or store Shopify access tokens in application logs.
• Our infrastructure is hosted on Railway with access controls limiting who can access production data.

No method of electronic transmission or storage is 100% secure. If you discover a security vulnerability, please contact us immediately at privacy@pricepilotai.com.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete the personal data we hold about you. To exercise any of these rights, contact us at privacy@pricepilotai.com and we will respond within 30 days.

You can also remove all your data at any time by uninstalling PricePilot AI from your Shopify admin.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you via email or an in-app notification. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

PricePilot AI
Email: privacy@pricepilotai.com