This is a working v1 written for clarity, not legalese. We'll refine language with counsel before our Shopify App Store submission. Until then, this captures our actual practices accurately. Questions: privacy@lingovae.com.
1. Who we are
LingoVae is a Shopify embedded app that helps merchants rewrite product descriptions in chosen brand voices. This Privacy Policy covers data handling for merchants who install the app and for visitors to this marketing site.
Operator: LingoVae
Privacy contact: privacy@lingovae.com
2. What we collect from your shop
Shop and account data
- Shop domain (e.g.
mystore.myshopify.com) and shop name - The owner email associated with the install
- Shopify-provided OAuth tokens (encrypted at rest)
- Install and uninstall timestamps
- Your subscription tier and quota usage
Product data
- Titles, descriptions, and product types for the products you choose to style
- Shopify product IDs (GIDs) for those products
- Metafield values we write under the
commstylesnamespace
We never read product data we don't need to render a draft. We never read order, customer, payment, or analytics data from your Shopify store. We have no access to your shop's customer list.
Usage data
- Voices you've installed, customized, or applied to products
- Drafts you've generated, accepted, edited, or reverted
- Bulk job runs and scheduled restyles
- Activity timestamps and authoring user IDs (for your team's audit log)
- Security events such as rate-limit triggers and authentication failures
3. What we don't collect from your customers
The LingoVae theme app extension that renders styled descriptions on your storefront does not set cookies, set tracking pixels, collect IP addresses, or store any personally identifiable information about your shop's visitors. It reads styled content from your shop's own metafields and renders it. That's the whole interaction.
See the Cookie Policy for the small set of session and CSRF cookies we set inside the LingoVae embedded admin app itself.
4. What we collect on this marketing site
Aggregate page-view data via Cloudflare Web Analytics and Plausible. Both are cookieless and don't track visitors across sites. We don't run advertising pixels.
If you submit the email-capture form, we forward your address to our marketing list provider for the purpose of sending you new-voice announcements and customer stories. You can unsubscribe from every email we send.
5. How we use your information
We use the data above to:
- Generate styled drafts using the AI provider that backs your selected voice
- Write approved styled content to Shopify metafields for the theme app extension to read
- Authenticate you and your team into the app
- Bill your subscription via Shopify's billing API (we never see your payment details)
- Enforce plan quotas and prevent abuse
- Diagnose issues you report to support
- Improve the product based on aggregated, anonymized usage
- Comply with applicable law and respond to lawful requests
6. AI providers
When you generate a styled draft, we send the product context (its current title, current description, and product type) to an AI provider that generates the rewritten text. We don't send customer data, order data, or anything beyond the product context required to write the description.
We currently use a multi-provider model that may route requests through several AI vendors. We update this list as our provider mix changes. As of this revision, providers may include: Anthropic (Claude), OpenAI, Google (Gemini), and xAI. Each provider processes requests according to its own privacy and data-processing terms.
7. Data retention
We retain your operational data (voices, drafts, metafields, schedules, version history) as long as the app is installed.
When you uninstall, Shopify notifies us. Within 48 hours we mark your data for deletion. Within 30 days it's fully deleted from production databases; within 90 days it's deleted from backups. Full details on the data-deletion page.
Billing records and security logs are retained for the periods required by law (typically 7 years for billing, 90 days for security logs).
8. Your rights
You have the right to:
- Request a copy of the data we hold about you
- Correct inaccurate data
- Delete your data (the simplest path is uninstalling the app — see data deletion)
- Withdraw consent to marketing email at any time
- Lodge a complaint with your local data-protection authority
For any of the above, email privacy@lingovae.com from the address you registered with. We respond within 30 days.
9. Security
We encrypt OAuth tokens at rest and all data in transit. We follow Shopify's security requirements for embedded apps. We don't store payment card data — Shopify's billing API handles that on our behalf.
10. International transfers
LingoVae operates from the United States. By installing the app, you consent to the processing of your data in the United States and any other country where our AI providers, hosting providers, or service vendors are located. We apply equivalent contractual safeguards (DPAs and SCCs where required) for all transfers.
11. Children
LingoVae is intended for merchant business use. We don't knowingly collect data from individuals under 16.
12. Changes to this policy
We'll change this page when we change practices. The "last updated" date at the top reflects the most recent change. For material changes, we'll notify installed merchants by email.
13. Contact
Privacy and data-rights requests:
privacy@lingovae.com
General support:
support@lingovae.com
Other ways to reach us: /contact