Privacy Policy
Effective date: October 18, 2026
Xorrel AI ("the app", "we", "us") is a Shopify app that helps merchants improve their product data. It is operated by Aakash Pareek, India. This policy explains what data the app collects when you install it on your Shopify store, how it is used, and how it is deleted.
1. Data we collect
When you install the app, Shopify gives us access to the data covered by the permissions you approve. We collect and store:
- Store information: your shop's myshopify.com domain, and the access token Shopify issues to the app.
- Product data: product titles, descriptions, product types, vendors, tags, categories, variant options, barcodes (GTINs), image URLs and image alt text, and product metafields used for category attributes.
- App data: audit results and scores, suggested and applied fixes (including the previous values, so changes can be undone), your app settings (such as brand voice), and your plan and usage.
We do not access orders, customers or payment information. The app does not request permissions for that data. We do not use tracking or advertising cookies; the app only uses the session handling provided by Shopify.
2. How we use the data
- To scan your catalog and calculate readiness scores.
- To generate suggested fixes, and to write approved changes back to your store.
- To let you undo changes.
- To manage your subscription and usage limits.
- To provide support when you contact us.
We do not sell your data, and we do not use it for advertising.
3. AI processing
When you ask the app to generate fixes, the relevant product text and images are sent to our AI provider to produce suggestions. We use paid API services whose terms state that the data is not used to train their models. Data is sent only for products you choose to fix (or new products, if you turn on auto-fix).
4. Service providers (sub-processors)
| Provider | Purpose | Data |
|---|---|---|
| Shopify Inc. | App platform, authentication, billing | Store and product data |
| Google (Gemini API) and/or Anthropic (Claude API) | Generating AI suggestions | Product text and images of products being fixed |
| Render | Application hosting | All app data in transit and in processing |
| Neon | Database hosting | Store, product and app data listed in section 1 |
These providers may process data outside your country, including in the United States. Data is encrypted in transit (HTTPS/TLS).
5. Data retention and deletion
- When you uninstall the app, our access to your store is revoked immediately.
- Shopify then sends us a data deletion request (
shop/redact), normally 48 hours after uninstall. When we receive it, we delete all data about your store from our database. - We keep one exception: a one-way hashed (non-reversible) record of your store domain and how many free AI fixes it has used, so the free allowance can't be reset by reinstalling. It contains no product or personal data.
- Because the app does not store customer data, customer data requests and customer deletion requests received from Shopify are acknowledged with no data to return or delete.
6. Your rights
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, export or delete your data, or to object to its processing. To make a request, email support@xorrelai.com from the email address on your Shopify account. We reply within 30 days. You can also uninstall the app at any time to delete your data.
7. Security
We use encrypted connections, restrict access to production systems, keep API keys out of our code, and request only the Shopify permissions the app needs.
8. Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, notify you in the app.
9. Contact
Questions about this policy: support@xorrelai.com