Privacy Policy

This Privacy Policy explains how Dropfeed LLC ("Dropfeed," "we," "us") collects, uses, and protects information when you install and use OnBrand AI (the "App") on your Shopify store. By installing the App, you agree to this policy.

1. Information we access

When you install OnBrand AI, we access the following through the Shopify Admin API, only as needed to provide the App:

• Store & account details: your store name and domain, and the store owner/primary contact email (for support and billing notices).
• Product data: product titles, descriptions, product type, tags, options/variants, and product images and their alt text — the content the App reads and writes.
• App usage & billing status: basic logs and your subscription plan/status (managed through Shopify).

2. How we use information

• To generate product descriptions, SEO titles/meta, and image alt text at your request.
• To publish that content back to your store when you choose to, and to let you revert changes.
• To operate, secure, support, and improve the App, and to administer billing.

3. AI processing and sub-processors

To generate content, the App sends your product text and the instructions you provide to our AI provider, OpenAI, which returns generated text. We also rely on infrastructure sub-processors to run the service:

• OpenAI — text generation. OpenAI does not use data submitted through its API to train its models.
• Fly.io — application hosting and database.
• Shopify — platform, authentication, and billing.

These sub-processors process data only to provide their services to us, under their own terms and security commitments.

4. Data sharing

We do not sell your data. We share information only with the sub-processors above to operate the App, or where required by law.

5. Data retention and deletion

We retain your settings (such as your brand-voice profile) and generation history while the App is installed, so the App works across sessions. When you uninstall the App or request deletion, we delete your associated data within 30 days, except where we must retain limited records for legal or accounting purposes.

We honor Shopify's mandatory compliance webhooks — customers/data_request, customers/redact, and shop/redact — even though the App does not store customer personal data; a shop/redact request triggers deletion of your store's data from our systems.

6. Security

We use industry-standard measures (encryption in transit, access controls, least-privilege API scopes) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Your rights (GDPR, CCPA, and similar)

Depending on your location, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. To exercise these, email support@dropfeed.io and we will respond as required by law. We do not sell personal information.

8. International transfers

Your data may be processed in the United States and other countries where we or our sub-processors operate. We take steps to ensure appropriate safeguards for such transfers.

9. Children

The App is for business use and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Material changes will be communicated where appropriate.

11. Contact

Dropfeed LLC
Navarre, FL
Email: support@dropfeed.io