Privacy Policy: Fortify8 AI Bulk Editor
Effective date: [the date it's published]
Who we are
Fortify8 AI Bulk Editor ("the app") is a Shopify app made by Fortify8 ("we", "us"). It helps merchants find products and change many of them at once, with a preview before anything changes and an undo afterwards. Questions about this policy: support@fortify8.com.
What the app reads and keeps
When a store installs the app, the app reads the store's catalog through Shopify and keeps a copy, so you can search and edit quickly. It keeps:
- Catalog data: products, variants, prices and costs, inventory levels and locations, tags, collections, product categories, metafields and metaobjects, and product images' web addresses and alt text.
- Store details: the store's Shopify address (domain), name and time zone.
- Your work in the app: each edit you make (what changed, the values before and after, so you can undo it, and when), saved searches, scheduled edits, and the exports you create. Edits and exports also record the Shopify staff ID of the person who ran them. The app doesn't keep staff names or email addresses.
- Access to your store: the access token Shopify gives the app, so it can read and update your catalog.
The app doesn't collect customer, order or payment information. It doesn't ask Shopify for access to customers or orders. It doesn't use advertising or analytics trackers.
AI features and Anthropic
Ask AI uses Claude, an AI model made by Anthropic. When you use Ask AI, the app sends Anthropic:
- what you typed (up to 500 characters);
- the app's own instructions;
- the list of fields your store can edit: Shopify's built-in fields and up to 120 of your metafield names, with their allowed values, which include the names and ids of your collections and product categories. This list goes with every Ask AI request, whether you asked to search or to change something.
It doesn't send product titles, descriptions, prices or other product data, customer data, your store's address, or any passwords or keys.
Under Anthropic's commercial terms, Anthropic may not train its models on this content. Anthropic deletes what the app sends, and what it answers, within 30 days. It keeps them longer only when it must to enforce its usage policy or to comply with the law.
AI only suggests. Nothing changes in your store until you preview the change and approve it. Our logs record the outcome of each AI request (for example, how many filters it made), never what you typed.
Who else handles the data
We don't sell or rent your data. We share it only with the services that run the app:
- Shopify, where your store and the app live;
- Amazon Web Services (AWS), which hosts the app;
- Anthropic, for Ask AI, as described above.
We also share data when the law requires it.
Where data is kept, and for how long
The app runs on AWS in the United States [confirm the region; the default is us-east-1]. Data is encrypted in storage and on its way between you, Shopify and the app.
| Data | How long it's kept |
|---|---|
| Catalog copy, saved searches, scheduled edits | While the app is installed, then deleted (see below) |
| Edit history (before and after values, so an edit can be undone) | While the app is installed, for as long as your plan keeps it: 30 days on Free, 1 year on Growth, no time limit on Pro (after a move to a plan that keeps less, 30 more days); then deleted |
| Your plan (as Shopify reports it) | While the app is installed |
| Export files | Deleted automatically 30 days after they're made, or sooner when you delete them in Export history |
| Logs (errors and job results) | 30 days. They hold the store's address and record IDs, never access tokens or what you typed into Ask AI |
| Database backups | 7 days, so deleted data can stay in a backup for up to 7 days |
| The counts of AI requests used this month and today | About 40 days |
When you uninstall
Uninstalling ends the app's access to your store right away: the app deletes its access token and cancels any scheduled edits. About 48 hours later, Shopify asks the app to erase the store's data. The app then deletes everything it holds for the store: the catalog copy, edit history, saved searches and exports, including the export files. Records of background jobs, which hold only the store's address and record IDs, are cleared as newer jobs replace them.
Shopify can also ask the app to return or erase a customer's data. The app holds no customer data, so there is nothing to return or erase.
Your choices
- Export your catalog at any time, and delete exports you no longer need.
- Uninstall the app to have your store's data deleted, as described above.
- Email support@fortify8.com to ask for a copy of your store's data or for it to be deleted sooner. We'll answer within [30 days].
Security
You reach the app only through your Shopify admin, which handles the login. Each store's data is kept separate. The access token and all stored data are encrypted at rest.
Changes to this policy
We'll post changes on this page with a new effective date. If a change is significant, we'll also tell you in the app [or by email: confirm].
Contact
Fortify8, support@fortify8.com [add a postal address if your lawyer advises it].