Privacy Policy

Last updated: April 13, 2026

Alfreya ("we", "us", or "our") operates the Alfreya Recommendations application (the "App") for Shopify stores. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

When you install and use the App, we collect the following information:

• Shop information: Your Shopify store domain, store name, and OAuth session tokens required for the App to function.
• Product catalog data: Product titles, descriptions, images, prices, and other publicly available product information from your store.
• Processing metadata: Job status information related to product data processing within the App.
• App performance and analytics: We may collect information about the App's performance and usage analytics strictly for our own internal purposes. This data is used solely to improve the App and is not shared with any third parties. All such data is deleted shortly after you uninstall the App.

2. Data We Do Not Collect

The App does not collect:

• Customer personal information (names, emails, addresses, or payment details)
• Customer browsing behavior or analytics
• Order or transaction data

3. How We Use Your Data

We use the collected data solely to:

• Generate AI-powered product recommendations for your storefront
• Authenticate and maintain your session within the App
• Display product processing status within the admin dashboard

4. Data Storage and Security

Your data is stored securely on Google Cloud Platform using Firebase and Firestore. All data is transmitted over encrypted connections (HTTPS/TLS). Access to your data is restricted to authenticated application processes only.

5. Data Retention and Deletion

We retain your data only for as long as the App is installed on your store. When you uninstall the App, all associated data (sessions, product data, and processing metadata) is automatically deleted from our systems. Aggregated app performance and analytics data may be retained for our internal use but does not contain any personally identifiable information. Additionally, Shopify's mandatory shop redaction process ensures complete removal of personal data within 48 hours of uninstallation.

6. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and handle the following Shopify mandatory webhooks:

• Customer data requests: Since we do not store customer personal data, no customer data is returned.
• Customer data erasure: Since we do not store customer personal data, no customer data needs to be deleted.
• Shop data erasure: All shop-related data is deleted from our systems.

7. Third-Party Services

The App uses the following third-party services to operate:

• Google Cloud Platform / Firebase: Data storage and processing infrastructure
• Shopify: Store platform and authentication

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at orkan@alfreya.com.