Privacy Policy

Effective October 15, 2026

In short

We collect only what we need to scan your store and email you the report: your store URL, your email address, and the scan results. We don't sell your data, we don't run ad trackers, and we never see your card details. Email us to see or delete your data.

1. Who is responsible

AI Shop Audit ("we", "us") is responsible for the personal data described here. Contact: [email protected].

2. What we collect

Store URL you submit for a free check or a paid report.
Email address: from checkout (provided to us by Creem), or when you ask us to email your free score.
Order details from Creem: order ID, name if given, amount, currency and order status. We do not receive your card number.
Scan results: what our software found on your store's public pages, and the report we generate.
Technical data: your IP address is used briefly to prevent abuse (rate limiting) and is not stored with your records. We record your approximate country and language preference with email requests.
Your settings: your theme and language choices are saved in your own browser (local storage), not on our servers.

We don't use advertising cookies or third-party ad trackers.

3. Why we use it

To run the scan you asked for and deliver your report or score by email (performing our contract with you).
To answer support requests and handle refunds.
To keep the service secure and prevent abuse (our legitimate interest).
To meet legal, tax and accounting obligations.

We do not sell or rent your personal data, and we don't use it for unrelated marketing. We do not use your store data to train AI models.

4. Who we share it with

We use a small number of service providers who process data on our behalf, only as needed to run the service:

Creem: payments, tax and invoicing (Merchant of Record). Creem processes your payment data under its own privacy policy.
Cloudflare: website hosting, security and data storage.
Email delivery provider: to send your report and service emails.
Cloud hosting provider: to run the scanning software that generates reports.

We may also disclose data if the law requires it. These providers may process data in countries other than yours; we rely on their standard contractual protections for such transfers.

5. How long we keep it

Orders and reports: up to 24 months, so you can ask for a copy and for accounting purposes.
Free-score email requests: until the email is sent, then up to 12 months.

You can ask us to delete your data sooner, except where we must keep it by law.

6. Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to or restrict how we use it. Email [email protected] and we'll respond within 30 days. If you're unhappy with our answer, you may also complain to your local data protection authority.

7. Security

Data is sent over HTTPS and stored with access limited to what the service needs. No method is perfectly secure, but we take reasonable steps to protect your information.

8. Children

The service is for businesses and isn't directed at children under 16. We don't knowingly collect their data.

9. Changes

We may update this policy. The date at the top shows the latest version.