1. Introduction

Growduct: AI Image Search is a Shopify app that enables merchants to offer AI-powered image search, automatic product detection, and similar product recommendations on their storefronts.

This policy applies to our Shopify app, associated APIs, customer support channels, and any other services provided through the Shopify platform (collectively, the "Services").

2. Information We Collect

Information From Merchants (When You Install the App)

Shopify automatically provides us with certain data necessary for the app to function:

• Store name
• Store URL
• Store owner name and email
• Shopify access tokens granting permissions you approve
• Product data: titles, descriptions, variants, images, pricing
• Collections and product categories
• Storefront settings related to search

We only request permissions required for product search, AI processing, and analytics.

Customer Information (From Your Store Visitors)

We do not collect personal data from your customers unless explicitly required for support and analytics. When visitors use image search:

• Uploaded images (used only to analyze and return search results)
• Basic usage events (e.g., search queries, clicks, interactions)
• Device and browser information
• IP address (for security and abuse prevention)

Uploaded Content

When shoppers or merchants upload an image for search:

• Product images or photos
• Visual attributes extracted from the image (e.g., category, color, style)

These are processed temporarily to generate search results.

Cookies & Tracking

We may use cookies or similar technologies on your storefront for:

• Session handling
• Search performance measurement
• Improving recommendations

No cross-site advertising or third-party marketing cookies are used.

3. How We Use Your Information

We use the collected data to:

• Provide visual search and product recommendation features
• Detect products within user-uploaded images
• Improve accuracy, speed, and relevance of search results
• Maintain and authenticate your Shopify account integration
• Offer customer support
• Analyze app performance and usage trends
• Diagnose errors and prevent abuse or fraud
• Comply with legal or regulatory requirements

AI Model Training

• Uploaded shopper or merchant images are not used for external commercial training.
• We may use anonymized or aggregated data internally to improve detection quality.
• You may request full opt-out at any time.

4. Legal Basis for Processing

Where applicable, we rely on:

• Performance of the Shopify app agreement
• Legitimate interests (security, optimization, analytics)
• Consent (where required)
• Compliance with legal obligations

5. Data Sharing & Disclosure

We never sell or rent personal information.

We may share limited data with:

Trusted Third-Party Services

• Cloud hosting and storage providers
• Logging, error monitoring, and analytics tools
• Customer support platforms
• Shopify API services

These providers access data only to the extent necessary to support the app.

Legal Compliance

We may disclose information if required by:

• Law enforcement
• Court orders
• Regulatory authorities

Business Transfers

If Growduct undergoes restructuring, acquisition, or merger, data may transfer under equivalent protection standards.

6. Data Security

We implement industry-standard safeguards:

• HTTPS encryption (SSL/TLS)
• Token-based API authentication
• Access control and audit logging
• Secure storage of temporary files
• Routine security monitoring and updates

Despite best efforts, no system is 100% secure, but we work continuously to protect your data.

7. Your Rights

Depending on your region, you may have rights such as:

• Access — Request a copy of the data we store
• Correction — Fix inaccurate information
• Deletion — Request deletion of your data or uploaded images
• Portability — Receive your data in a readable format
• Withdraw Consent — Opt out of non-essential data processing

Merchants may exercise rights by contacting us (details below). Your customers may reach out to you directly; we support merchant requests to fulfill such obligations within Shopify's requirements.

8. Data Retention

We retain:

• Merchant/store data: as long as the app is installed
• Uploaded images: temporarily for processing, then deleted
• Logs and analytics: stored for limited time (typically 30–180 days)
• Data required by law: retained per local requirements

You may request earlier deletion at any time.

9. Children's Privacy

• This app is not intended for individuals under 18.
• We do not knowingly collect personal information from children.
• If such data is discovered, it will be deleted promptly.

10. International Transfers

Your data may be processed in regions outside your own due to global hosting infrastructure.

We ensure appropriate protection mechanisms, such as:

• Standard Contractual Clauses (SCCs)
• Equivalent safeguards required by data protection laws

11. Shopify Merchant Requirements

Per Shopify's Partner and App Store policies:

• We do not use merchant data for any purpose other than providing app functionality
• We immediately delete store data upon app uninstallation
• We do not access or use customer personal data unless required for app features
• We do not share customer data with third parties except for essential service providers

12. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes will be communicated via:

• Email notification
• Shopify admin notifications
• Updated version on our public privacy page

Continued use of the app signifies acceptance of updated policies.

13. Contact Us

If you have questions or requests regarding privacy: