Privacy Policy

When you install BeaconAI, we access the following data from your Shopify store via the Shopify Admin API:

• Store information: shop domain, store name, currency, and locale.
• Products: titles, descriptions, handles, prices, and product types — used to generate your llms.txt catalog.
• Pages: page titles and content — included in your llms.txt for AI context.
• Legal policies: your store's refund, privacy, shipping, and terms policies — included so AI tools can answer policy questions accurately.
• Session data: Shopify session tokens to authenticate API requests. Stored securely in our database.
• Referral analytics: anonymous referral domain and page path from your storefront's referral tracking pixel — used to show you which AI tools send traffic to your store. No personally identifiable information (PII) is collected.

• To generate and host your store's llms.txt file on Shopify's CDN.
• To create a URL redirect at /llms.txt on your storefront.
• To display AI traffic analytics within the BeaconAI dashboard.
• To provide audit scores and recommendations for improving AI discoverability.
• To manage your subscription via the Shopify Billing API.

We do not sell your data to third parties. We do not use your data for advertising purposes.

BeaconAI stores session tokens and sync metadata in a PostgreSQL database hosted on DigitalOcean (New York region). Data is encrypted in transit (TLS) and at rest. We retain your data for as long as your app is installed. Upon uninstallation, all your data is deleted from our database within 48 hours.

BeaconAI uses the following third-party infrastructure:

• Shopify: Admin API, Billing API, CDN file storage, and Web Pixels.
• DigitalOcean: Application hosting and managed PostgreSQL database (NYC region).

If you or your customers are located in the European Economic Area (EEA), you have the right to access, correct, or delete personal data we hold. BeaconAI complies with Shopify's mandatory GDPR webhook requirements:

• Customer data requests: We will respond to customer data requests within 30 days.
• Customer data erasure: We will erase customer data within 30 days of a request.
• Shop data erasure: All shop data is deleted upon uninstall confirmation.

BeaconAI does not store personal data about your customers (shoppers). The only personal-adjacent data we hold is the Shopify merchant session token.

BeaconAI's admin dashboard (embedded in Shopify) does not set cookies. The Web Pixel installed on your storefront operates within Shopify's sandboxed pixel environment and does not access or set cookies directly. It only reads the page's referrer and URL to attribute AI traffic.

We may update this Privacy Policy from time to time. We will notify merchants of material changes by updating the "Last updated" date above. Continued use of BeaconAI after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [email protected]