Legal · StylePass for Shopify
StylePass App Privacy Policy
No AI Training
Your data trains no AI
We never use your store’s data, or your audit, to train, fine-tune or improve AI models.
No Customer Data
Your products, nothing more
The app asks Shopify for one permission, to read your products. It never sees your customers or orders, and never asks for your passwords.
Shopify Compliant
Erased after uninstall
48 hours after you uninstall, Shopify sends shop/redact and we erase your store’s data as soon as it arrives.
This Privacy Policy covers StylePass, an app for Shopify stores made by StylePass, Inc. (“StylePass AI,” “we,” “our,” or “us”). The app lets you request a doubt audit of the product pages you pick: our team prepares the audit, and the app shows it to you. This Policy explains what the app collects, why, who processes it, how long we keep it, and how you can delete it.
It covers the app only. Our other services are covered by our main privacy policy.
The controller of the personal data the app collects is StylePass, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Section 9 says how to reach us.
By installing or using StylePass, you agree to this Policy.
Section 01
Information We Collect
From Shopify, when you install and open the app
- Your store’s name and domains: its myshopify.com address and the web address your shoppers visit
- The store owner’s email address from your Shopify account. We use it to fill in the email field for you, and to follow up about your audit if you start a request and don’t send it.
- Whether the store is a development store, and when the app was installed, last opened or uninstalled
From you, as you fill in the request form
- The email you enter, once it is a complete address and you move on from the field
- The products you pick, up to five, by their name
We keep these even if you don’t send the request, so our team can follow up about your audit. The request form says so, under the email field.
From you, when you request an audit
- The contact email you confirm, or type in, for the audit
- The one to five products you pick in Shopify’s product picker: each one’s name, web address and main image
- Your request’s history: when it was made, changed, cancelled or completed
From Shopify, when you request an audit
The app reads the content of the products you pick, and sends it with your request:
- Each product’s name, web address, description, type, category, brand and tags
- Its options and variants, with their SKUs, prices and availability
- Its images and their alt text
- Its SEO title and description
- Your store’s currency
This lets our team audit your products even when your online store is password-protected.
From public sources, to build the audit
- Your store’s public product and policy pages, read logged out, the way any shopper sees them
- Public reviews of your products, on your store and on marketplaces and other stores that sell them. A quoted review can show its author’s public display name, as the review itself does.
- What AI shopping assistants answer when shoppers ask about products like yours
From you, if you book a call with our team
“Book a call” on your finished audit opens our booking page on Calendly. If you book a call, Calendly collects these and passes them to us:
- Your name and email, and the email of anyone you add as a guest
- The time you pick, and your time zone
- Anything you write to help us prepare for the call
The call itself is held on Google Meet.
Usage events
Records of what happens in the app, such as the app being opened, products being picked, an email being entered, or an audit being requested or opened. They hold your store’s ID, counts and states: never an email address, a product name, a web address or anything you typed.
What We Do NOT Collect
The app reads no data about your customers or their orders. It asks Shopify for one permission: to read your products. We never ask for your passwords. We do not collect payment details.
Section 02
How We Use This Information
- For our team to prepare your audit, and to show it to you in the app
- To email you when your audit is ready, and to reply to you about it
- To hold the call you book with our team, if you book one
- To follow up about your audit when you started a request and didn’t send it
- To keep the app working: to find and fix errors, and to limit how many audits one store can request
- To comply with applicable laws and Shopify’s requirements
Your email is for your audit. We use it to tell you your audit is ready, to discuss it with you, and to follow up if you started a request and didn’t send it. We never add it to a newsletter or a sales sequence, and we never sell it.
Section 03
No AI Training
Your audit’s findings stay in your audit. They never flow into the StylePass Atlas, the knowledge of shopper questions the app draws on for every store.
The AI services we use to build an audit (Section 4) work under terms that do not let them train their models on what we send them.
Absolute commitment: We do NOT use your store’s data, or anything derived from it, to train, fine-tune or improve AI models, ours or anyone else’s. Ever.
Section 04
Who Processes Your Data
We share data only with the following subprocessors, and only to run the app, build your audit and talk with you about it. We never sell it.
Running the app
| Provider | Purpose | Region |
|---|---|---|
| Shopify | The platform the app runs on. It gives us your store’s details, and the products you pick with their content. | Global |
| Google Cloud | Our servers and databases: Firestore holds your store record, your requests with their product content, and your audits; BigQuery holds the usage events. | India |
| Cloudflare | Hosting and network in front of our servers and this website | Global |
Building the audit
| Provider | Purpose | What it receives |
|---|---|---|
| Anthropic (Claude) | The AI our team works with, in our own working sessions, to read your pages, product content and reviews, and draft the audit | Your public pages and reviews, your store’s name and web address, and the products in your request with their content. Never your email address. |
| OpenAI (ChatGPT), Perplexity, Anthropic (Claude) | The AI-visibility checks: we ask their AI assistants the questions shoppers ask, and see whether your brand comes up | Questions about a type of product, and your brand’s name. Never personal data. |
Talking with you
| Provider | Purpose | What it receives |
|---|---|---|
| Google Workspace | Our email, at [email protected], and Google Meet for a call you book with our team | Your contact email and the emails we exchange about your audit, and the call itself |
| Calendly | Booking a call with our team, if you choose to | Your name and email, your guests’ emails, the time you pick, your time zone and anything you write for us |
When you book, Calendly also shows you its own terms and privacy notice, which cover what it does with your booking.
Section 05
Data Retention
| Data Type | Retention Period |
|---|---|
| The app’s access to your store (Shopify’s access token) | Deleted when you uninstall |
| Your store record: name, domains, owner email | While the app is installed; erased 48 hours after you uninstall |
| What you filled in on the request form without sending it: the email you entered and the products you picked | Until you send the request, when it becomes part of it, or ask us to delete it; erased 48 hours after you uninstall |
| Audit requests, with your contact email, the products and their content | 24 months after the request last changed, unless you ask us to delete them or uninstall sooner |
| Your audit reports | 24 months after the request last changed, unless you delete them in the app or uninstall sooner |
| Usage events | Erased 48 hours after you uninstall |
| A call you book: the booking in Calendly and in our calendar | Until we no longer need it to follow up about your audit, or sooner if you ask us to delete it |
After we delete your data, copies of it can remain in our automatic backups for up to 14 days, until those backups delete themselves.
Section 06
Deleting Your Data
“Delete my audit report”, in the app
The button at the foot of the app’s screen deletes your audit report straight away, after you confirm. We keep your request, with the products you picked and the email you gave us, so our team can follow up about your audit. To have your requests and email deleted too, email [email protected] and we delete them. Your store record stays while the app is installed, with the dates of past requests, which set how many audits a store can request.
Uninstalling the app
Uninstalling closes any open request at once and deletes the app’s access to your store. 48 hours later, Shopify sends us shop/redact, and we erase everything the app holds for your store: the store record, every request and audit, and the usage events. That is well within the 30 days Shopify allows. If you have installed the app again by then, we erase nothing, because you are using the app again.
A call you booked
A call booking is kept in Calendly and in our calendar, not in the app, so deleting your audit report or uninstalling doesn’t reach it. Email [email protected] and we will delete it.
Compliance webhooks
StylePass implements and responds to all three mandatory Shopify compliance webhooks:
customers/data_requestThe app holds no data about your customers, so there is nothing to send. We record the request and confirm it.
customers/redactThere is no customer data to erase, for the same reason. We record the request and confirm it.
shop/redactWe erase everything the app holds for your store as soon as it arrives, 48 hours after you uninstall, unless you have installed the app again by then.
All webhooks are verified using Shopify’s HMAC signature validation. Unverified requests are rejected.
Section 07
Your Rights
EEA / UK — GDPR
Legal bases include performance of a contract (the audit you request) and legitimate interests. You may ask for a copy of your data, a correction or its deletion, and lodge a complaint with your local DPA.
California — CCPA
You have the right to know what personal info we collect and to request deletion. StylePass does not sell personal information.
To exercise any rights, contact [email protected].
Section 08
Policy Changes
Each version of this Policy is dated; this is version 2026-10-22. When you request an audit, we record the version the app showed you. Material changes will be communicated in the app or by email.
Section 09
Contact
For privacy questions, data requests, or help with the app:
By post: StylePass, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States