Privacy Policy – Shopify Integration

This Privacy Policy describes how FARDO (“we”, “us”, “our”) accesses, processes and uses information from your Shopify store when you choose to connect it to the FARDO platform. The integration is built on top of Shopify’s official Admin API and is only enabled after you explicitly grant consent through Shopify’s standard OAuth authorization flow. This Privacy Policy forms an integral part of FARDO’s Terms and Conditions.

1. What the Shopify Integration Does

The integration is designed to perform two main functions:

• Product visibility analysis. We retrieve your product catalog and feed it to large language models (LLMs) to estimate how AI assistants and search engines (such as ChatGPT, Gemini and Perplexity) are likely to perceive and describe your products.
• AI-assisted product optimization. We help you generate improved product titles and descriptions with AI tools and, only when you explicitly trigger the action, write that optimized content back to your products using Shopify’s official Admin API.

2. Information We Access

The specific information we access is limited to the OAuth scopes you authorize when installing the app (read_products and write_products). Typically this includes:

• Your store identity (your .myshopify.com domain and basic shop information).
• Your product catalog: product titles, descriptions, images, prices and related product metadata.
• An access token issued by Shopify during the OAuth flow, stored securely through our integrations layer.

We do not access your orders, payment or checkout data, or any personal information about your customers. We never request more permissions than what is required to operate the features you enable, and you can revoke them at any time by uninstalling the app.

3. How We Use the Information

Information retrieved from Shopify is used only for the following purposes:

• Generating product visibility analyses, scores and recommendations within the FARDO platform.
• Providing AI-generated optimizations for your product titles and descriptions.
• Writing optimized product content back to your store, strictly when you confirm the action.
• Operating, maintaining and improving the FARDO product, including debugging, security and aggregated usage analytics.

We do not use your Shopify data for advertising, data resale, or to build profiles of third parties.

4. AI Processing and Third-Party Data Processors

To deliver the analysis and optimization features, parts of your product data may be sent to third-party large language model providers acting as data processors on our behalf. These providers are bound by contractual obligations regarding confidentiality and data protection.

We also rely on infrastructure providers for the OAuth connection and secure token custody (our integrations layer based on Nango), as well as hosting, database and observability. These vendors only process the data necessary to deliver their service and under data-processing agreements consistent with applicable law.

We do not sell your information or share it with third parties for their own independent marketing purposes.

5. Optimizing Products on Your Behalf

FARDO will only modify your product content when you explicitly confirm the action inside the platform. You can review the proposed changes before applying them, and you remain in control of what is written back to your store.

You can disconnect the integration at any time, which prevents any further changes to your catalog.

6. Mandatory Compliance Webhooks

In accordance with Shopify’s requirements, FARDO implements Shopify’s mandatory privacy compliance webhooks:

• customers/data_request and customers/redact: acknowledged as required. Because FARDO does not store any of your customers’ personal data, there is no customer data on our side to return or erase.
• shop/redact (sent by Shopify after the app is uninstalled): we delete the store data we hold and revoke the associated access.
• app/uninstalled: we revoke the store’s connection and remove its stored credentials.

7. Data Retention

We retain Shopify-derived data for as long as your FARDO account is active and the integration is connected, or for as long as needed to provide the contracted service. Once the integration is disconnected, the app is uninstalled, or your account is deleted, we delete or anonymize the related data within a reasonable period, except where retention is required to comply with legal obligations or to resolve disputes.

8. Your Rights

Depending on your jurisdiction (for example, the GDPR in the European Economic Area or the CCPA/CPRA in California), you may have the following rights regarding your personal data:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Withdraw your consent at any time, including by uninstalling the Shopify app.
• Request a copy of your personal data in a portable format.
• Lodge a complaint with a competent supervisory authority.

To exercise these rights, contact us using the details in the “Contact” section below.

9. Security

We apply industry-standard technical and organizational measures to protect access tokens and personal data, including encryption in transit, restricted access on a need-to-know basis, audit logging and regular review of our security practices. No system is completely secure, and we will notify affected users of any incident in accordance with applicable law.

10. International Transfers

Our processors may operate in countries outside your country of residence. Where required by law, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to govern international transfers of personal data.

11. Children

The Shopify integration is not directed to individuals under the age of 16. We do not knowingly process personal data of minors through this integration. If you believe a minor has provided personal data through FARDO, please contact us so we can take appropriate action.

12. Revoking the Integration

You can uninstall the FARDO app at any time from your Shopify admin (Settings → Apps and sales channels). Uninstalling triggers Shopify’s app/uninstalled webhook, upon which we revoke the connection and delete the store credentials we hold. You can also disconnect the integration from your FARDO account settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the integration, applicable law or our internal practices. Material changes will be communicated through the FARDO platform and will take effect on the date indicated at the top of this document.

14. Contact

If you have questions about this Privacy Policy or our Shopify integration, you can contact us at:

FARDO
Email: hola@heyfardo.com
Website: https://www.heyfardo.com