Your content.
Your choice of AI.

Information used

We store your Shopify shop domain and installation identity, encrypted provider API keys, selected model and usage settings, article briefs and drafts, up to 20 saved versions per draft, Shopify article links, usage counters and operational request status. Shopify session tokens and online access tokens are used transiently to authenticate requests; we do not save them.

We do not request customer or order access. Product titles, descriptions and handles are read to provide context when you select products. Do not put customer data, credentials or other sensitive personal information into article briefs.

AI providers and your choices

When you request generation, your brief, selected product facts and editorial instructions are sent to the provider you choose: Google Gemini, OpenAI or Anthropic. Your corresponding API key authenticates those requests. We also request model lists and input-token counts from that provider. Each provider processes this information under its own API terms, retention practices and account settings.

OpenAI generation requests specify store:false. This is not a promise of zero provider retention. Review your provider’s data controls and processing terms. We do not route a request to another provider automatically.

Provider keys are encrypted at rest with authenticated encryption and are not returned to the browser after saving. The application server decrypts them to make your requested provider calls. Only the store owner can change keys and limits. Authorized app users may generate with enabled connections. Disconnecting removes the active saved key; it does not revoke the key at its provider.

Purpose and retention

Information is used to generate and manage your drafts, apply usage controls, sync articles you explicitly choose, troubleshoot failures and prevent duplicate operations. We do not sell this information or use your articles to train our own models.

Drafts and provider settings are retained while the app is installed. Request usage records support monthly caps and troubleshooting. Settings audit records are kept up to 90 days and webhook receipt identifiers up to 30 days. Verified uninstall and shop-redaction events remove the shop’s active application records. Articles already synced to Shopify remain under the merchant’s control in Shopify.

Infrastructure access logs omit request bodies, authorization headers and URL query strings. Hosting and network systems may process connection metadata for operation and security. Restricted daily local backups retain application data for up to seven days; deletion requests must be reapplied before any restore.

Access, removal and support

Contact help@appsorcerer.com to request access, correction or removal of your app data. Revoke an API key in the provider console if you no longer want it usable. We verify that requests relate to the store you control. Shopify’s mandatory privacy webhooks are supported.

Setup and support guide