Privacy Policy

Last updated: August 6, 2026

This Privacy Policy describes how ProductIndex ("we", "us", or "our") collects, uses, and protects information when you install and use the ProductIndex Analytics Shopify app ("the App").

Information We Collect

When you install the App, we collect and store:

• Shop information: Your Shopify store domain and the OAuth access token required to call the Shopify Admin API on your behalf. Access tokens are encrypted at rest using AES-256-GCM.
• Product and review data: Product metadata and customer reviews fetched from your store via the Shopify Admin API (metaobjects scope). This data is stored in our database to power analytics features.
• AI provider credentials (optional): If you choose to supply your own AI API key (OpenAI, Anthropic, Google Gemini, or xAI Grok), that key is encrypted at rest using AES-256-GCM and stored only to process your store's requests. We never use your key for any purpose other than serving your store.
• Usage data: Aggregate counts of AI analysis calls made on your behalf when you use our managed AI tier.

How We Use Your Information

• To provide the App's features: sentiment analysis, semantic search, and analytics dashboards.
• To generate vector embeddings from your product reviews for similarity search.
• To authenticate your store's ongoing API requests via the stored access token.
• To calculate managed-tier usage for billing purposes.

We do not sell, rent, or share your store's data or customer data with third parties for marketing purposes.

Customer Data

Reviews fetched from your store may contain customer-authored text. This content is stored solely to provide analytics to you, the merchant. We do not use customer review content for any purpose unrelated to your store's analytics.

Data Retention and Deletion

We honor all Shopify mandatory privacy webhooks:

• Shop redact (GDPR): When you uninstall the App and 48 hours have elapsed, Shopify sends a shop redact webhook. We permanently delete all data associated with your store — including your access token, products, reviews, and usage records.
• Customer data request (GDPR): If a customer requests a copy of their data, we will provide any stored review content associated with their customer ID to you within 30 days of receiving the request.
• Customer redact (GDPR): If a customer requests deletion of their data, we permanently delete any stored review content associated with their customer ID within 30 days of receiving the request.

Security

All data is stored on AWS infrastructure (US West — Oregon region). OAuth access tokens and AI API keys are encrypted at rest. Data is transmitted over HTTPS/TLS. We follow AWS security best practices including least-privilege IAM policies and Secrets Manager for credential storage.

Third-Party Services

Depending on your configuration, review text may be processed by the following AI providers to generate sentiment scores and embeddings:

• AWS Bedrock (default managed tier) — processed in the US West region
• OpenAI — if you supply your own OpenAI API key
• Anthropic — if you supply your own Anthropic API key
• Google Gemini — if you supply your own Gemini API key
• xAI Grok — if you supply your own Grok API key

Each provider's own privacy policy governs how they handle API request data. We only send review text to the provider you have selected.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects when changes were last made. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

For privacy inquiries, data requests, or to report a concern, contact us at privacy@productindex.ai.

ProductIndex Website Visitors

This section applies to visitors and account holders on productindex.ai, separate from the Shopify app described above.

Information collected

If you do not create an account, the Site collects only anonymous analytics data via Google Analytics 4 — pages visited, time on page, browser type, and general geographic region. If you are located in the European Economic Area, the United Kingdom, or Switzerland, this collection only happens after you accept the cookie-consent banner shown on your first visit; see Cookies below for details.

If you create an account (to save products, register as a producer, or access the producer dashboard), we additionally collect and store:

• Account information: your email address and a securely hashed password. We never store your password in plain text.
• Two-factor authentication data (if enabled): your TOTP secret, encrypted at rest (AES-256-GCM), and a set of one-time backup codes, stored as Argon2id hashes (the same one-way hashing used for passwords). Because backup codes are hashed, we cannot recover them if lost — you would need to generate a new set by re-enrolling two-factor authentication.
• Saved products: the products you save to your favorites list.
• Organization and billing data (producer accounts only): if you register an organization to list or promote products, we store your organization profile, team member roles, and — if you enable paid visibility features — a Stripe customer reference and payment method reference. ProductIndex does not store your raw card number; Stripe processes and stores payment details directly.
• Session cookies: an authentication session cookie and, if you have two-factor authentication enabled, a short-lived second-factor verification cookie. These are strictly necessary for signing in and are not used for advertising or tracking.

How we use this information

• To authenticate you and maintain your signed-in session.
• To provide account features: saved products, producer organization management, catalog and offer management, and billing for optional paid visibility features.
• To detect and prevent fraud or abuse of the Site's authentication and billing systems.
• To send transactional emails (email verification, password reset, two-factor alerts, billing notices). We do not send marketing email without separate opt-in.

Cookies

The Site sets the following cookies:

• Analytics cookies (_ga, _ga_8XKCZC5N4Q) — set by Google Analytics. If you are located in the European Economic Area, the United Kingdom, or Switzerland, we ask first: these cookies are only set after you accept the cookie-consent banner shown on your first visit, and you can decline. If you are located elsewhere, these are set by default and you may opt out via the Google Analytics opt-out browser add-on.
• Consent-preference cookies (pi_consent_required, pi_consent) — record which cookie-consent region applies to you and, if applicable, your accept/reject choice, so we don't ask again on every page. Strictly necessary to operate the consent banner itself.
• Session cookie — set only if you sign in; strictly necessary to keep you authenticated.
• Two-factor verification cookie — set only if you sign in with two-factor authentication enabled; strictly necessary and short-lived.

We do not use third-party advertising or cross-site tracking cookies.

Third-party services

In addition to the AI providers and Stripe (described above), the following third-party service may process visitor or account data on our behalf:

• Linear (support ticketing): when you submit a message through any form on our Contact page, or email hello@, corrections@, dmca@, privacy@, or security@productindex.ai, your name, email address, and message are sent to and stored in Linear, our issue-tracking system, so we can track and respond to your request. This applies to every inquiry category, including data-subject requests submitted through the privacy form and copyright notices submitted through the DMCA form.

We do not use these services to sell your data. Each provider's own privacy policy and security practices govern how they handle data on our behalf.

Affiliate and outbound link tracking

When you click a "Buy" or affiliate link on a product page, we record that a click occurred (which product, which retailer, and a timestamp) so we can operate our affiliate and producer billing programs. This click record is not linked to your identity unless you are signed in at the time, and is never sold or shared with third parties beyond what is necessary to process the affiliate transaction with the retailer.

No sale of data

We do not sell, rent, or share visitor or account data with third parties for marketing purposes.

Data deletion requests

To request deletion of your account and associated personal data, email privacy@productindex.ai from the email address associated with your account. We will confirm your identity and delete your account data within 30 days, except where we are required to retain certain records (for example, transaction records needed for tax or accounting purposes) for a longer period under applicable law.

Your rights (GDPR / CCPA)

If you are located in the European Economic Area, the United Kingdom, or a U.S. state with its own privacy law (such as California's CCPA/CPRA), you may have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (see above), object to or restrict certain processing, and receive a copy of your data in a portable format. To exercise any of these rights, email privacy@productindex.ai. We do not sell personal data, so there is no "opt out of sale" action needed. We aim to respond to verified requests within 30 days.

Contact for website privacy

For questions about data collected through the productindex.ai website, contact privacy@productindex.ai.