Privacy policy

Data we process

• Clerk account identifiers and profile information used for authentication.
• Shopify shop, product, variant, inventory, order, customer, refund and fulfillment data authorized by the merchant.
• Stripe customer, subscription and billing status; payment card data remains with Stripe.
• Derived metrics, forecasts, alerts and recommendations.

Purpose and retention

Data is used to synchronize stores, calculate performance metrics, provide recommendations, enforce subscriptions and secure the service. Shopify webhook delivery records are removed after 30 days. Fulfilled customer-data exports are removed after 90 days. Store data is erased when Shopify sends the mandatory shop-redaction webhook.

Processors and transfers

BoostAI relies on Clerk for authentication, Stripe for billing, Shopify for commerce data and, for paid plans when configured, Anthropic for text enhancement. Deterministic evidence remains the source of truth and customer contact fields are not sent in the AI prompt.

Your choices and rights

Merchants can disconnect Shopify and manage billing from the dashboard. Shopify customer data-access and redaction requests are authenticated and handled through mandatory compliance webhooks. Contact privacy@boostaicommerce.app for access, correction, deletion or objection requests.