Brainform (“we”, “the app”) provides an AI product-search chat that a merchant installs on their Shopify store.
| Data | Source | Purpose | Scope |
|---|---|---|---|
| Product catalog (titles, descriptions, images, prices, URLs) | Merchant’s Shopify store | Power AI search and product results | read_products |
| Inventory levels (stock quantities) | Merchant’s Shopify store | Keep stock status in results current | read_inventory |
| Storefront chat messages (shopper questions) | Storefront chat widget | Generate answers and product suggestions | App Proxy |
| Shop + app-session identifiers | Shopify OAuth | Authenticate the embedded app | write_app_proxy, session |
We do NOT request or access customer personal data,
orders, payment data, or any read_customers /
read_all_orders-type scopes. The app’s only Admin scopes are
read_products and read_inventory.
Storefront chat messages are processed to produce answers. They may be logged for the merchant’s in-admin analytics/console. We do not sell chat data or use it to identify individual shoppers.
We honor Shopify’s mandatory compliance webhooks:
customers/data_request — respond to a shopper data-access
request.
customers/redact — delete shopper data on request.shop/redact — delete the shop’s data 48h after uninstall.
On uninstall, the app marks the shop uninstalled and stops processing.
We use Google Cloud Platform (application hosting and Google Vertex AI for the language model) and MongoDB Atlas (database) to host and process data. We do not sell data to third parties.
Data in transit is encrypted (TLS/HTTPS). Access is restricted to the app’s own services.
Merchants can uninstall at any time to stop processing. Shoppers may exercise access/erasure rights via the merchant, honored through the compliance webhooks above.
We will update this policy as needed and revise the “Last updated” date.
Questions: natalya@brainform.ai.