Privacy Policy

We collect account information such as name, email address, authentication identifiers, team membership, billing status, and support messages.

When a merchant connects Shopify, we store the shop domain, granted scopes, install status, and encrypted Shopify access tokens needed to provide the app's features.

We process merchant-provided content such as product briefs, uploaded files, images, URLs, prompts, generated drafts, Shopify theme assets, products, pages, collections, and publish history.

We collect technical data such as request logs, device/browser information, error logs, and usage events needed to operate, secure, and improve Storecrew.

We use information to authenticate users, connect Shopify stores, generate storefront drafts, create products and pages, write merchant-approved Shopify theme changes, back up theme assets, and support rollback.

We use technical data to prevent abuse, debug errors, maintain service reliability, improve workflows, and comply with legal and platform requirements.

We do not sell merchant or buyer personal information.

Storecrew accesses Shopify data only through the scopes approved by the merchant during installation.

Depending on granted scopes and merchant actions, Storecrew may read or write products, inventory, locations, files, content, metaobjects, legal policies, privacy settings, theme files, and related storefront data.

Storecrew does not require direct access to customer payment card data.

Storecrew uses AI service providers to generate storefront copy, product content, storefront sections, page drafts, and operational suggestions from merchant-provided inputs.

Merchants should avoid submitting sensitive personal information that is not needed for storefront generation.

We share information with service providers that help us run Storecrew, including hosting, database, authentication, billing, analytics, storage, AI processing, and support providers.

These providers may process information only as needed to provide services to Storecrew and our users.

We may disclose information if required by law, to protect Storecrew or users, or in connection with a business transfer such as a merger or acquisition.

We use HTTPS for data in transit and encryption or restricted access controls for sensitive stored credentials such as Shopify access tokens.

No system is perfectly secure. If we identify a security incident that affects personal information, we will take appropriate steps consistent with applicable law.

We keep information for as long as needed to provide Storecrew, maintain backups, resolve disputes, enforce agreements, and comply with legal obligations.

When a Shopify app is uninstalled, Storecrew receives Shopify uninstall and privacy compliance webhooks and removes or redacts Shopify connection data as required.

Merchants may request deletion of account or store data by contacting us.

Depending on location, users may have rights to access, correct, delete, export, or object to certain processing of personal information.

Shopify merchants can also trigger Shopify privacy requests through Shopify. Storecrew supports the mandatory Shopify privacy webhook topics for customer data requests, customer redaction, and shop redaction.

Storecrew may process information in countries other than where a user or merchant is located. We use appropriate safeguards where required by applicable law.

We may update this policy from time to time. The latest version will be posted on this page with the updated date.

For privacy requests or questions, contact Storecrew at contact@storecrew.io.

Also see our Terms of Service.