Information we process
We process only the information needed to provide and operate Answer Engine Ready, including:
- your Shopify store domain, store identity, locale, currency, and installation status;
- read-only product, variant, collection, page, blog, and policy content available through approved Shopify scopes;
- public storefront pages and structured data needed to perform readiness scans;
- scan results, findings, evidence excerpts, reports, schedules, and account settings;
- Shopify plan and subscription status, but not payment-card or bank-account details;
- support messages and limited operational, security, and diagnostic logs.
How we use information
We use this information to authenticate your store, run requested and scheduled audits, generate findings and reports, verify plan access, provide support, secure the service, meet legal obligations, and improve reliability. We do not sell merchant or customer information and do not use store data for advertising.
Shopify access
The app requests the read-only scopes read_products and read_content. It does not request permission to edit products, orders, customers, themes, or storefront content. Shopify handles app installation and plan billing.
Service providers
We use service providers to run the application and deliver its features, including Shopify, Fly.io, Supabase, and Resend. They process information on our behalf under their applicable terms and security commitments. We may also disclose information when required by law or to protect the service and its users.
Retention and deletion
We retain account and audit information while the app is installed and as needed to provide the service. Raw storefront HTML is parsed but not retained. When deletion is requested through the app or Shopify’s mandatory privacy workflows, we delete tenant scan data, findings, reports, stored sessions, and access tokens, subject to limited records we must retain for security, fraud prevention, or legal compliance.
Security and international processing
We use encryption in transit, encrypted Shopify tokens, tenant-scoped access controls, authenticated webhooks, and operational monitoring. No online service can guarantee absolute security. Information may be processed in the United States or other locations where our providers operate.
Your choices and rights
You can uninstall the app to stop future access, request deletion from Settings, or contact us to request access, correction, or deletion of information associated with your store. Applicable rights can vary by location. We may need to verify your store authority before completing a request.
Changes and contact
We may update this policy as the service or legal requirements change. We will post the updated effective date here. Questions or privacy requests can be sent to contact@forslack.io.