Privacy Policy

This Privacy Policy explains how Xpertshire (India), referred to as “we,” “us,” or “our,” handle your personal information when you use our Shopify App, AIRank Xpert.

Introduction

As part of our mission to help Shopify merchants get discovered by AI shopping agents and answer engines through AI/GEO/AEO product optimization — analyzing products, generating optimized titles, descriptions, tags, and image alt-text, and publishing AI-discovery files, our App collects and processes information to provide its services. By using AIRank Xpert, you agree to the terms of this Privacy Policy.

Information from Merchants

When you install and use AIRank Xpert, we collect the following information:

• Your email address, store admin URL, and Shopify plan details (for authentication).
• Your product catalog data accessed via the Shopify Admin API — product titles, descriptions, tags, image metadata, identifiers (SKU/GTIN), product type, vendor, collections, and metafields — used to calculate your AIRank Score and generate optimization suggestions.

We use this information to:

• Provide, maintain, and improve the App.
• Calculate AIRank Scores and generate AI-powered optimization suggestions.
• Display analytics and reporting within your app dashboard.
• Authenticate your Shopify session securely.
• Ensure compliance with legal and Shopify requirements.

Merchant Responsibility

Merchants using AIRank Xpert must maintain an up-to-date privacy policy on their Shopify store that complies with applicable privacy laws. Because AIRank Xpert can publish public AI-discovery files that expose your product catalog and your merchant-authored FAQs (see below), please ensure this is acceptable for your store and do not place confidential information in your FAQs or brand-voice settings.

AI Sub-processors

To generate optimized content and recommendations, your product-level text — titles, descriptions, tags, vendor, identifiers (SKU/GTIN), image metadata, and price ranges — is sent to third-party AI providers acting as our sub-processors. We use a fallback chain of:

• Groq
• Cerebras
• SambaNova
• OpenRouter
• Google Gemini

⚠️ Only product-level data is sent to these providers — we never send customer or shopper personal data. We do not train AI models on your merchant data, and we do not use, sell, or share your store data for AI model training. This complies with the February 27, 2026 Shopify Partner Program Agreement update.

Public AI-Discovery Files

By design, AIRank Xpert can publish public files — such as llms.txt and agents.md — along with a public FAQ endpoint. These intentionally expose parts of your store catalog (product titles, handles, categories, vendor) and your merchant-authored FAQs so that AI agents and answer engines can read and cite your store.

This public exposure is the core purpose of the App (AI visibility). Please only include information you are comfortable making public.

FAQ Analytics & Bot Detection

When your public FAQ and AI-discovery endpoints are accessed, we log the request’s User-Agent and detect AI bots (such as GPTBot, ClaudeBot, and PerplexityBot) to power the visibility analytics shown in your dashboard.

• We do not log visitor IP addresses.
• We do not set cookies on your storefront.
• These analytics events are retained for approximately 90 days and then automatically purged.

Information from Merchant Customers

⚠️ AIRank Xpert does not collect or store customer or shopper personal data — no names, emails, phone numbers, addresses, payment card details, or order contents. If you enable the AI Revenue feature, we read only an order’s total amount and referrer to attribute it to an AI channel (see the AI Revenue Attribution section below) — never customer personal data.

AI Revenue Attribution (Order Data)

If you enable the AI Revenue feature, AIRank Xpert uses the read_orders scope to read each order’s total amount and traffic source (referrer) solely to attribute the order to an AI assistant (ChatGPT, Perplexity, Gemini, etc.). Attribution is deterministic — no AI provider is involved, and order data is never shared with any third party.

We store only derived per-channel aggregates (channel, order count, revenue total, day). For recent AI-attributed orders we also store the Shopify order ID, kept solely so you can open that order in your Shopify admin to verify the attribution. This order ID is not customer personal data — we never store customer names, emails, addresses, phone numbers, or order contents.

This data is stored inside your own Shopify store (a private app metaobject) — it is not exported to any third-party database.

This is processed under Shopify’s Protected Customer Data requirements (Level 1) with data minimization. The stored order ID is deleted when a customers/redact request is received for that order, and all data is deleted when the app is uninstalled (shop/redact).

Sharing Your Information

We may share your information with:

• Shopify, as required for integration and compliance.
• Third-party service providers for data hosting (DigitalOcean) and the AI sub-processors listed above.
• Legal authorities, if required by law.
• Companies involved in mergers, acquisitions, or business transfers (merchants will be notified in such cases).

We do not sell your information to third parties.

Cookies & Tracking Technologies

AIRank Xpert does not set tracking cookies on your storefront, and we do not track your visitors’ browsing patterns.

• Session cookies are used solely within the embedded Shopify admin context to maintain your authentication state — these are managed by Shopify, not by AIRank Xpert.
• We do not use any third-party advertising or tracking services.

Data Security

We implement industry-standard measures to secure your data against unauthorized access or breaches, including multi-tenant isolation so one store’s data cannot be accessed by another. However, no method of digital storage or transmission is 100% secure. In case of a data breach, affected merchants will be notified promptly.

Data Retention

• We retain your store’s data for the duration of your use of AIRank Xpert and as required by law.
• When you uninstall the App, your store’s data is deleted within 30 days.
• We honor Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact); the shop/redact request triggers immediate cascading deletion of all data associated with your shop.
• FAQ visibility analytics are retained for approximately 90 days, and some anonymized, aggregated scoring data may be retained to improve the App.

Your Rights

As a merchant, you have the right to:

• Request access to your data.
• Correct or update your information.
• Request deletion of your store’s data.
For data deletion, you can either uninstall the app or contact us directly.

GDPR Compliance (EEA Users)

If you are located in the European Economic Area (EEA), you have rights under GDPR, including the right to access, correct, delete, restrict, or port your personal data. For GDPR-related requests, please contact us at support@xpertshire.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant updates will be communicated via email or in-app notification.

International Data Transfers

Your information may be transferred and processed internationally, including in India and other locations where our service providers and AI sub-processors operate. We ensure compliance with applicable international data transfer standards.

Contact Information

For privacy concerns or questions, please reach us at:
📧 support@xpertshire.com
🌐 www.xpertshire.com