Privacy Policy

1. Who we are

Plane Compare AI is developed and operated by Veselyi Dev (sole proprietor), Ukraine. For any privacy-related question, contact us at info.planedev@gmail.com.

2. What data we collect

2.1 From merchants (store-level data)

When a merchant installs the App, we store the following, scoped to that store's domain:

• Authentication data: an OAuth access token issued by Shopify, used solely to make authorized API calls on the merchant's behalf. We do not see or store the merchant's Shopify password.
• App configuration: settings the merchant chooses in the App's admin panel - button text and colors, sidebar appearance, which product attributes to display, AI on/off preference, and current subscription plan.
• Product catalog data: product titles, prices, images, descriptions, and metafields, retrieved from the merchant's store via the Shopify Admin API, used to power comparisons and to generate AI embeddings and summaries. This data is product data, not personal data.
• Usage counters: a monthly count of AI-generated comparisons, used only to apply plan limits.
• Aggregate comparison statistics: how many times the comparison feature was opened, and which products were viewed together, recorded without any shopper identifier (no customer ID, no session ID, no IP address). This powers the Analytics section of the App's admin panel.
• Contact form submissions: if a merchant uses the "Contact Us" page, we receive the email address and message they provide, solely to respond to their inquiry.

2.2 From shoppers (storefront visitors)

We do not collect or store any information that identifies an individual shopper. The comparison feature reads publicly available product data from the store to build a comparison; it does not read or store a shopper's name, email, account, order history, or browsing history. The only shopper-related signal we record is an anonymous count of comparisons opened per store, with no way to trace it back to a specific person.

3. Third-party services we use

To provide the App's functionality, product and comparison data is processed by the following third-party services, under their own privacy and security terms:

• Shopify - Platform hosting, authentication, billing. Store and product data, via Shopify's own APIs.
• OpenAI - Generating product "embeddings" for similarity matching. Product titles, descriptions, and metafields (no shopper or personal data).
• Anthropic (Claude) - Generating the AI comparison summary text. The specific product facts being compared (no shopper or personal data).
• Supabase - Database hosting for the data described in Section 2.
• Railway - Application hosting. Standard application logs.
• Resend - Sending contact-form emails to us. The merchant's message and reply-to email, only when they submit the Contact Us form.

We do not sell or rent any data to third parties for advertising or marketing purposes.

4. How we use this data

We use the data described above solely to:

• Operate the comparison feature and generate accurate, AI-assisted product comparisons.
• Let merchants configure the App's appearance and behavior.
• Enforce the usage limits associated with each subscription plan.
• Provide the Analytics feature to merchants on eligible plans.
• Respond to support requests submitted through the Contact Us page.
• Comply with Shopify's platform requirements and applicable law.

5. Data retention and deletion

• Store-level data is retained for as long as the App remains installed on a store.
• When a merchant uninstalls the App, Shopify notifies us via a mandatory webhook, and we permanently delete all data associated with that store - configuration, cached AI summaries, product embeddings, and usage records - within the timeframe required by Shopify's App Store policies.
• Merchants or shoppers who wish to request or delete personal data associated with a store can do so through Shopify's standard data request/erasure process, which we support via Shopify's mandatory compliance webhooks.

6. Security

• All data in transit is encrypted (HTTPS/TLS).
• Our database uses Row Level Security, configured to deny public access by default - no publicly accessible API can read or write store data without our application's own authenticated backend.
• Access to production systems and API keys is limited to the App's developer.

7. Children's privacy

The App is intended for use by Shopify merchants operating a business and is not directed at children. We do not knowingly collect data from children.

8. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the App's functionality or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision.

9. Contact us

Questions about this policy or how your data is handled can be sent to info.planedev@gmail.com, or through the Contact Us page inside the App's admin panel.