Privacy Policy

Who we are

SHOPIS is an ecommerce platform at shopis.ai that helps merchants create and manage online stores, including AI-assisted design and store management. For privacy questions or requests, contact [email protected].

Information we collect

We store information you provide when creating an account or store, including your name, email address, store settings, catalog content and information you submit to the service. Passwords are stored as hashes. When merchants process orders through SHOPIS, store records can include customer contact details, delivery addresses and order information. We record AI request activity, limited message previews, token usage and estimated costs for platform administration, budget monitoring and abuse prevention. Authorized platform administrators can review this activity. Hosting and application systems may also process technical request information, such as IP addresses and error logs.

Google and Apple sign-in

If you choose Google or Apple sign-in, we receive your provider identifier, email address and available name information to create and authenticate your SHOPIS account. Google sign-in requests only basic identity permissions: openid, email and profile. We do not request access to your Gmail messages, Google Drive files or contacts. Apple may provide a private relay email address. We store the provider identifier and account information; we do not store provider access or refresh tokens.

How we use information

We use information to authenticate users, maintain sessions, set up stores, deliver merchant tools, process store operations, respond to support requests and protect the service. Google account information is used for account creation and authentication, not advertising.

Service providers and AI features

SHOPIS uses Vercel for hosting, Neon for database storage and Cloudflare R2 for file storage. Google and Apple process sign-in when you choose those options. When you use AI features, relevant prompts and store context may be sent to Anthropic to produce a response or proposed change. These providers process information under their own applicable terms and policies. Service processing may take place outside your country. We do not sell your personal information.

Connecting external AI apps (MCP)

You can connect your store to AI apps you choose, such as Claude, Claude Code, ChatGPT, Codex or Cursor, through the SHOPIS connector at https://shopis.ai/api/mcp or the SHOPIS plugin. Connecting is always your decision: you sign in to SHOPIS, choose one store and the permissions to grant (read store data, prepare and apply changes, run AI design builds), and you can disconnect at any time in Settings → AI apps. Store owners and admins decide whether other staff may connect AI apps.

When connected, the AI app can request the store information your staff role allows, such as products, collections, inventory, orders, customers (including names, contact details and order history), discounts, content, settings and reports, and it receives your account name and email address to identify the connection. Changes are prepared as proposals and applied only after you confirm them; every applied change and every connection is recorded in your store's activity log. SHOPIS never sends passwords, payment card data, payment provider credentials or API secrets through the connector.

Information returned to an AI app is processed by that app's provider (for example Anthropic, OpenAI or Anysphere) under its own terms and privacy policy, including how long it keeps conversations. SHOPIS stores connection details (app name, granted permissions, hashed access tokens and last use) while the connection is active and keeps the activity log as part of your store records.

Cookies and security

We use essential cookies for login sessions, OAuth sign-in protection and store selection. Merchant sessions expire after 30 days unless ended earlier. We use measures including hashed passwords and HTTP-only session cookies. No storage or transmission system can be guaranteed completely secure.

Retention and your choices

We retain account and store information while it is needed to operate the service and handle security, support or legal obligations. To request access, correction or deletion of your information, email [email protected] from your account email. We may verify your identity and retain records where required by applicable law. You can revoke SHOPIS access in your Google or Apple account settings; this does not itself delete your SHOPIS account. Shoppers should contact the merchant for requests about a particular store or order; merchants are responsible for their own customer-facing privacy notices.

Updates

We may update this policy as the service changes and will update the date on this page. Material changes will be communicated through an appropriate service notice.