Logo
Logo

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Merchant Floor ("we," "us," or "our") collects, uses, and protects your personal information when you use our website and services, including our Shopify App.

1. Information We Collect

Account Information

  • Email address

  • Name

  • Company information (optional)

  • Country

  • Payment information (processed securely by Stripe or Shopify Billing)

Usage Information

  • How you use our services and which features you access

  • Performance and error data

  • Device and browser information

Content You Upload

Shopify Store Data (for Shopify App users)

  • Store domain name

  • OAuth access tokens (for API access to your store)

  • Product images and data you explicitly import for processing

Important: We do not collect or store any data about your end customers (the people who buy from your store). We only store data about you, the merchant.

2. How We Use Your Information

We use your information to:

  • Provide and improve our services

  • Process payments and manage your account

  • Communicate with you about your account and our services

  • Provide customer support

  • Analyze usage patterns to improve our tools

  • Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Third-party services that help us operate (e.g., Stripe for payment processing, Supabase for database hosting, OpenAI for AI content generation)

  • Legal Requirements: When required by law or to protect our rights

  • Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement appropriate security measures to protect your information:

  • Encryption in transit (TLS/SSL) and at rest

  • Row Level Security policies on all database tables

  • Access controls and authentication

  • Regular security assessments

5. Data Retention

  • Account information: Retained while your account is active

  • Generated content: Stored for 90 days to provide the service, then automatically deleted

  • Usage data: Retained for analytics and service improvement

  • Account deletion: When you delete your account (or uninstall our Shopify App), your data enters a 30-day grace period. During this time, you can sign back in to cancel the deletion and restore your data. After 30 days, all data is permanently and irreversibly deleted

  • Purchased credits: Valid for 365 days from purchase

6. Your Rights

You have the right to:

  • Access your data: Download a copy of all your data from the Account & Data section of your dashboard

  • Delete your data: Request account deletion from the same section. Your data will be permanently removed after a 30-day grace period

  • Correct your data: Contact us to correct any inaccurate information

  • Restrict processing: Request that we limit how we use your data

  • Data portability: Receive your data in a structured, machine-readable JSON format

  • Object to processing: Object to our use of your data for certain purposes

7. Cookies and Tracking

We use a cookie consent banner to give you control over analytics tracking.

  • Essential cookies: Authentication session cookies are always active and necessary for the service to function. These cannot be disabled

  • Analytics cookies (with consent): Google Analytics — used to understand how visitors use our site. Only loaded after you accept cookies via the consent banner

  • Local storage: Used to remember your cookie preference and cache site settings for performance

You can change your cookie preferences at any time by clearing your browser's local storage.

8. Third-Party Services

Our service integrates with third-party providers, each with their own privacy policies:

  • Stripe: Payment processing

  • Shopify: E-commerce platform integration and billing for App Store users

  • OpenAI: AI content and image generation

  • Supabase: Database and authentication infrastructure

  • Google Analytics: Site analytics (with consent only)

9. Shopify App Users

If you install Merchant Floor from the Shopify App Store:

  • We access your store data only with the permissions you grant during installation

  • We do not store any of your end customers' personal data. Our tools only process product images and content

  • When you uninstall our app, your account enters a 30-day soft-delete period. If you reinstall within 30 days, your account and all data are automatically restored. After 30 days, all data is permanently deleted

  • Shopify may send us mandatory GDPR webhooks (data request, data erasure). Since we do not store end-customer data, these are acknowledged and logged for audit purposes

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us: