Privacy Policy

Last updated: 10 August 2026

Who we are

StoreCommand AI ("StoreCommand AI", "we", "us") operates the StoreCommand AI service. StoreCommand AI is the data controller for the personal data described in this notice. You can reach us at privacy@storecommandai.app.

Personal data we collect and why

• Account data — name, email address, hashed login credentials or Google sign-in identifier. Used to create and secure your account and provide the service. Legal basis: performance of a contract.
• Store connection data — Shopify shop domain and an encrypted access token. Used to read your catalog and, on your approval, write approved changes. Legal basis: performance of a contract.
• Catalog and content data — products, variants, images, collections and metafields mirrored from your store, plus AI prompts and generated outputs. Used to run audits and produce proposals. Legal basis: performance of a contract.
• Support messages — the content of emails and support requests. Used to answer you. Legal basis: performance of a contract and legitimate interests.
• Usage and device data — log records, IP address, browser and device identifiers, feature usage and error telemetry. Used for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests.
• Billing records — plan, subscription status and renewal dates. Card details are never collected or stored by us; payment data is handled by our payment provider. Legal basis: performance of a contract and legal obligation.

Who we share data with

• Merchant of Record — Paddle.com Market Ltd acts as the reseller and Merchant of Record for purchases, and handles payments, subscription management, invoicing, tax compliance and refunds.
• Service providers and subprocessors — hosting and database infrastructure, AI model providers that process the content you submit for generation, email delivery, error monitoring and analytics tooling.
• Shopify — where you have connected a store, to read catalog data and write changes you approve.
• Professional advisers — legal, accounting and audit advisers where needed.
• Authorities — where we are required to disclose data by law.

We do not sell personal data, and content you submit is not used to train third-party models.

International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

Retention

Account data is retained while your account is active. Mirrored catalog data is retained while a store is connected; disconnecting a store queues deletion of its mirrored records. AI generation history and change audit logs are retained for up to 24 months so changes can be reviewed and rolled back, unless you ask us to delete them sooner. Billing and tax records are kept for the period required by law. Data is deleted or anonymised when it is no longer needed.

Your rights

Subject to applicable law you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests or withdraw consent where consent applies. Email privacy@storecommandai.app and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption of stored Shopify access tokens, row-level access controls in our database, least-privilege service credentials and audit logging of writes to your store.

Cookies

We use strictly necessary cookies and local storage to keep you signed in and to secure the session. We use limited analytics and error-reporting cookies to understand product usage and diagnose faults. We do not use advertising cookies. You can clear or block cookies in your browser settings; strictly necessary cookies are required for sign-in to work.

Changes

We will update this page when our practices change and revise the date above. Material changes will be notified by email or in the app.

Contact

Privacy requests: privacy@storecommandai.app