Privacy Policy

EcomSlash helps Shopify merchants optimize product listings (titles, descriptions, and related catalog content) using artificial intelligence. The App operates as a bridge between your Shopify store and your own OpenAI account — it does not provide AI processing on our own infrastructure.

Under our Bring Your Own Key (BYOK) model, you supply your personal OpenAI API key within the App settings. We do not resell, bundle, or subcontract AI services. All AI requests are made directly to OpenAI using credentials you control.

We collect and store only the data necessary to operate the App for your store:

• Store and account data: your Shopify shop domain, OAuth session tokens required for App authentication, and subscription/billing status managed through Shopify Billing.
• App configuration: your encrypted OpenAI API key, SEO prompt preferences, autopilot settings, and other merchant-configured options.
• Product catalog data: product titles, descriptions, tags, vendor, product type, and related fields needed to generate or apply optimizations.
• Optimization history: prior product content saved to support rollback features on eligible plans.

We do not read, collect, or store personal information (PII) about your store's end customers or buyers — including names, email addresses, phone numbers, shipping addresses, or order history tied to individual shoppers. The App does not access Shopify customer records for optimization purposes.

When you request a product optimization, relevant product fields are transmitted from Shopify through the App to the OpenAI account associated with the API key you configured. We do not send product data to any other AI provider or to our own AI systems.

Optimized content may be written back to your Shopify store only when you explicitly apply changes or when autopilot is enabled according to your settings. You remain responsible for reviewing content before publication where applicable.

The App integrates with the following third-party services:

• Shopify: platform hosting, authentication, billing, and product data access via the Shopify Admin API.
• OpenAI: AI text generation, accessed exclusively with your BYOK credentials. OpenAI's handling of data is governed by your agreement with OpenAI and their privacy policy.

We do not sell merchant data to third parties. We do not use merchant or product data for advertising or unrelated analytics.

App data is stored in our application database associated with your shop domain. Your OpenAI API key is stored in encrypted form. Access to shop data is restricted to what is required to provide App functionality.

When you uninstall the App, shop-related data is removed from our systems. Shopify may additionally send a shop/redact compliance webhook approximately 48 hours after uninstallation; we process that request and delete any remaining shop data.

We support privacy rights under applicable laws, including GDPR and CCPA, through Shopify's mandatory compliance webhooks:

• customers/data_request: acknowledged — we do not store end-customer PII.
• customers/redact: acknowledged — we do not store end-customer PII to delete.
• shop/redact: remaining shop data is deleted upon receipt.

Because we do not hold buyer personal data, customer data requests are typically limited to confirming that no such data is retained by the App. Merchants may contact us directly for questions about their shop data.

For privacy-related questions or requests regarding this policy, contact us at contact@ecomslash.com or visit ecomslash.com.

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date.