Privacy Policy for Alfryea

Effective Date:3 Septemer, 2025

Thank you for using Alfreya, an AI-powered Shopify app that enhances product discovery and search while helping merchants attribute sales through affiliate tracking. Your trust is important to us, and we are committed to protecting your data and respecting your privacy.

This Privacy Policy describes how we collect, use, process, and protect data obtained through your Shopify store.

1. Information We Collect

a. Product Information

We collect product-related data such as:

• Titles, descriptions, and tags
• Prices and inventory levels
• Product images
• Collections and categorization

This information is used to power our AI-driven search and recommendation engine.

b. Order Information

We access order data to:

• Attribute sales to our app through affiliate tracking
• Monitor performance
• Investigate and resolve order-related support issues

Data includes order IDs, timestamps, and product line items. We do not store any personal customer data from orders.

c. Event and Pixel Data

We track customer interactions and pixel events to:

• Measure the effectiveness of product recommendations
• Attribute sales to Alfreya
• Continuously improve the AI algorithms

2. No Storage of Customer Data

Alfreya does not store any personally identifiable customer information. While we may access limited customer data via the read_orders or read_customer_events scopes for processing, this data is handled transiently during app operations and never persisted on our servers.

3. Data Sharing and Third Parties

We do not sell or share any data with third parties for marketing or commercial purposes.

We use trusted third-party service providers to process product data for the following purposes:

• Running AI models
• Enhancing and optimizing product search quality
• Supporting infrastructure needs (e.g., servers, inference engines)

These providers do not store any data — they only process it temporarily. All processing is governed by strict data protection agreements to ensure secure handling and full compliance with applicable laws and Shopify’s Partner Program requirements.

Processed outputs (e.g., embeddings or indexes) are then used on our infrastructure to deliver AI-powered product search results within your storefront or merchant dashboard.

4. Data Retention and Redaction

We retain only the minimum data necessary to operate the app effectively.

When your store uninstalls Alfreya or issues a data redaction request (via Shopify), we:

• Automatically receive a webhook notification
• Remove all associated store data within 24 to 48 hours

We may continue to store limited affiliation data (such as order totals and number of orders) for our own internal use cases, including performance analysis, service improvements, and record-keeping. This data is aggregated and not used to identify individual customers.

You may also contact us directly to expedite deletion or confirm removal.

5. Data Security

We implement industry-standard security measures to protect your store's data:

• All data is transmitted over HTTPS
• Systems follow the principle of least privilege
• Data is encrypted where appropriate
• Access is restricted to authorized personnel only

We continually review our security practices to ensure ongoing protection.

6. Your Rights and Controls

As a Shopify merchant, you retain full control over your store's data and can:

• Review app access scopes in your Shopify admin
• Uninstall the app at any time to revoke access
• Request deletion of residual data by contacting us
• Submit data redaction requests through Shopify's built-in GDPR tools

7. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. You will be notified of significant updates via email or through our app listing.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at:
Email: orkan@alfreya.com