Privacy Policy
Last updated: 10 April 2026
This Privacy Policy explains how ShopClone.ai (“ShopClone”, “we”, “us”) collects, uses, stores, shares, and protects information when you use our website, web application, APIs, and related services (the “Services”). It is intended to meet the transparency expectations of Shopify’s Partner Program and applicable privacy laws. By using the Services, you agree to this policy. If you do not agree, do not use the Services. This policy is provided for information and is not legal advice.
Who we are
ShopClone is operated by the entity responsible for this site and your agreement with us. For privacy requests, the contact channel listed at the end of this policy is the primary way to reach us.
Information we collect
We collect information in the following ways:
Information you provide
Information you provide when you register, connect integrations, or use features, including:
- Name, email address, and profile details from our authentication provider when you create an account
- Prompts, text, URLs, uploads, and other inputs you submit for AI generation, scraping, or storefront building
- Store domain or connection details you enter when linking a commerce account (for example a myshopify.com domain)
- Support and feedback messages you send to us
Information collected automatically
When you use the Services, we and our providers may collect technical and usage data, such as:
- IP address, approximate location derived from IP, browser type, device type, and operating system
- Dates and times of access, pages or screens viewed, and diagnostic or error logs
- Cookies and similar technologies used for security, session management, and (where enabled) analytics
If you subscribe or pay for the Services, our payment processor (Stripe) handles payment card and billing details according to its own terms; we do not store full card numbers on our servers.
How we use information
We use information to:
- Provide, operate, and improve the Services (including AI generation, hosting, deployment, and commerce integrations you enable)
- Authenticate you, secure accounts, detect fraud and abuse, and troubleshoot issues
- Process subscriptions and payments and respond to billing questions
- Send service-related notices (for example security, policy, or product changes); marketing messages only where permitted and with appropriate controls
- Comply with legal obligations and enforce our terms
- Respond to privacy and data requests from you, from Shopify where applicable, and from regulators where required
AI inputs and outputs
- When you use AI features, your prompts and related inputs may be sent to our AI provider (Google Gemini / Google AI) to generate outputs such as storefront HTML or suggestions.
- We may retain inputs and outputs for a limited period for safety, debugging, quality, and abuse prevention.
- We do not use your store data or customer personal data to train public third-party AI models except as required to provide the Services and as described in our agreements with providers.
You are responsible for the lawfulness of content you submit and for ensuring you have rights to any third-party materials (including product pages you ask us to scrape or reference).
User Content
- Any content you upload, such as assets or text used in your projects, remains yours.
- You grant us a limited license to process this content solely to provide the ShopClone service.
Retention
We retain information only as long as needed for the purposes above, including:
- Account and profile data: while your account remains active and for a short period after closure to recover from accidental deletion or resolve disputes, unless a longer period is required by law
- Connected store credentials and synced commerce data: while the integration is active and for a reasonable period after you disconnect, to resolve issues and meet legal obligations
- Order- and customer-related data: for as long as needed to provide features you used and as required for tax, accounting, or legal compliance
- AI prompts and outputs, logs, and backups: typically for a limited retention window, unless a longer period is needed for security, abuse investigation, or legal holds
- Payment records: as required by tax and financial rules (processed by Stripe according to its retention practices)
Security
We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. However, no online system is perfectly secure.
Your Responsibilities
- You are responsible for keeping your account secure and for choosing a strong password.
- Do not share your login details with others.
Subprocessors and sharing
We share information with service providers (“subprocessors”) that process data on our behalf to run the Services, including:
- Clerk — authentication, session, and account security
- Stripe — payments and subscriptions
- MongoDB / cloud database hosting — application data storage
- Amazon Web Services (including S3) — file storage and related infrastructure
- Google (Gemini / Google AI) — AI inference when you use AI features
- Hosting and infrastructure providers that operate our application servers
We require subprocessors to implement appropriate security measures and to process personal data only on our instructions where applicable. We may also disclose information if required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, safety, and security of users and the public.
Shopify merchant and customer privacy requests
Where applicable, we support Shopify’s mandatory privacy webhook flows (including customer data request, customer redact, and shop redact) and cooperate with merchants to honor individuals’ rights under applicable laws. Merchants remain responsible for their own storefront privacy notices and for lawful collection of buyer data. If you are an individual seeking to exercise privacy rights related to a merchant’s use of ShopClone, you may also contact us at the email below and we will respond consistent with our role as a service provider.
International Transfers
ShopClone may store or process data in countries outside your own. When transferring data internationally, we use safeguards meant to provide an equivalent level of protection as required by applicable law.
Your rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion or restriction of processing in certain cases
- Object to processing or withdraw consent where processing is based on consent
- Receive a copy of your information in a portable format, where applicable
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us using the email at the end of this policy. We may need to verify your identity before fulfilling requests.
Cookies and similar technologies
We use cookies and similar technologies for security, preferences, and (where enabled) analytics. You can control cookies through your browser settings; disabling certain cookies may limit some features.
Links to Other Sites
ShopClone may include links to external websites. We are not responsible for their privacy practices.
Children
ShopClone is not intended for individuals under 18 years old. We do not knowingly collect data from minors.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Where required by law, we will provide additional notice.
Contact us
Questions about this Privacy Policy or our data practices: contact@shopclone.ai