Last updated: July 21, 2026
This Privacy Policy explains how DigiInks (“DigiInks,” “we,” “us”) collects, uses, and protects information in connection with the DigiInks AI Shopping Assistant Shopify application (the “App”). By installing or using the App, you agree to this Policy.
• Merchants who install the App on their Shopify store.
• Shoppers who interact with the AI shopping assistant on a merchant’s storefront.
Merchant store data (product catalog only). With the merchant’s authorization, the App reads product information through Shopify’s Admin API using the read_products scope, including product titles, descriptions, prices, images, collections, tags, product metafields, and variant availability. This data is used to build and maintain an AI search index for the store.
The App does not request or access customer records, orders, checkout data, or payment information.
Merchant account/session data. To operate as an embedded Shopify app, we store an OAuth offline access token and related session data issued by Shopify, along with a store record, the store’s app settings, and a history of catalog sync runs.
Shopper interactions. When a shopper uses the storefront assistant, the App processes the shopper’s typed query and limited prior-turn conversation context to return relevant product results. We do not store shopper identities, shopper accounts, IP addresses, or other shopper personal data. For operational monitoring we log non-identifying metadata (for example, the length of a query), not the query content itself.
• To provide AI-powered product search and recommendations on the storefront.
• To index and keep the merchant’s product catalog current.
• To operate, secure, monitor, and improve the App.
• To provide merchant support and respond to requests.
We do not sell personal information, and we do not use shopper or customer data to train AI models.
AI search understanding is provided by DigiInks’ managed AI search service. To deliver this service we use the following sub-processors:
• Cloudflare — application hosting, edge compute, and storage.
• OpenAI — large language model processing used to interpret shopper queries and rank products. Query text and product context may be sent to OpenAI solely to generate search results.
We select sub-processors that provide appropriate safeguards, and we do not authorize them to use the data for their own purposes or model training beyond providing the service to us.
• Merchant/store data is retained while the App is installed.
• Shopper query content is not retained by the App.
• On uninstall, the merchant’s store is deactivated and session tokens are removed. In line with Shopify’s requirements, the App erases the store’s data and purges the store’s search index upon receiving Shopify’s shop/redact request (sent approximately 48 hours after uninstall).
The App implements Shopify’s mandatory privacy webhooks:
• customers/data_request — because the App stores no customer personal data, there is no customer data to compile; the request is acknowledged and logged.
• customers/redact — the App stores no customer personal data to erase; the request is acknowledged and logged.
• shop/redact — the App erases the store’s stored data and purges its search index.
Merchants and their customers may also contact us at the address in Section 11 to exercise applicable rights (access, correction, deletion, objection).
We apply administrative and technical safeguards appropriate to the data we process, including encrypted transport (HTTPS/TLS), verified requests (Shopify session tokens, signed app-proxy requests, and HMAC-verified webhooks), least-privilege data access (read_products only), and secure handling of secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We and our sub-processors may process data in locations outside the merchant’s or shopper’s country. Where required, we rely on appropriate transfer mechanisms to protect the data.
The App is intended for use by merchants operating Shopify stores and is not directed to children. We do not knowingly collect personal data from children.
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, additional notice.
DigiInks
Email: [email protected]
Website: https://digiinks.com
For privacy-specific inquiries, contact: [email protected]