Privacy Policy

Last updated: June 21, 2026

1. Introduction

Wandex ("we," "our," or "us") provides a Shopify application that helps merchants optimize their product listings for AI-powered shopping assistants. This Privacy Policy explains how we collect, use, store, and protect information when you install and use our application.

By installing Wandex, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information from Shopify (via authorized API access)

When you install our app, we access the following data through Shopify's API:

  • Store information: Store name, domain, and locale settings
  • Product data: Product titles, descriptions, tags, images, metafields, product type, and vendor information
  • Analytics data: Traffic source and referrer information (used for AI traffic attribution)
  • Customer identifiers: Shopify Customer IDs (internal identifiers) for AI traffic attribution analytics — these are not personally identifiable information (PII)

2.2 Information we do NOT collect

We do not access, collect, or store:

  • Customer personal information (names, emails, phone numbers, addresses)
  • Payment or credit card information
  • Order details or transaction history
  • Customer browsing behavior
  • Any Protected Customer Data (PCD) as defined by Shopify

3. How We Use Your Information

We use the collected information solely to provide our service:

  • Generate AI Readiness Scores for your products
  • Provide AI-powered optimization suggestions for product content
  • Apply approved fixes to your product listings
  • Track and attribute traffic from AI shopping assistants
  • Conduct A/B testing on product content variations
  • Generate performance reports and analytics within your dashboard
  • Monitor product scores and send alerts when readiness drops

4. Third-Party Services

To analyze and optimize your product content, we send limited product data to the following third-party AI service:

DeepSeek (deepseek.com)

  • Data sent: Product titles, descriptions, tags, and category/attribute information
  • Purpose: Content quality analysis and optimized content generation
  • Data NOT sent: Customer information, pricing data, order data, store credentials, or any personally identifiable information

DeepSeek processes this data solely for the purpose of generating responses and does not retain your data for training purposes.

5. Data Storage and Security

  • All data is transmitted over HTTPS (TLS 1.2+)
  • Application data is stored on encrypted cloud infrastructure
  • We implement access controls to limit data access to essential operations only
  • We do not sell, rent, or share your data with any third party for marketing or advertising purposes

6. Data Retention and Deletion

  • Active accounts: Your data is retained while the app remains installed on your store
  • After uninstallation: All merchant data is permanently deleted within 30 days of app removal (automated daily cleanup)
  • Immediate deletion: You may request immediate deletion of all your data at any time by contacting us
  • Customer data: Customer IDs stored for attribution are anonymized upon customer redaction request (via Shopify's GDPR webhook). All shop data is permanently erased upon shop redaction request.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the data we hold about your store
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data at any time
  • Portability: Request your data in a machine-readable format
  • Withdrawal of consent: Uninstall the app at any time to withdraw consent

For EU/EEA merchants (GDPR):

We process your data based on legitimate interest (providing the service you installed) and your consent (by installing the app). You may exercise any of the above rights by contacting us at the email below. Shopify's GDPR webhooks (customers/data_request, customers/redact, shop/redact) are fully supported for automated data access and erasure requests.

For California merchants (CCPA):

We do not sell personal information. You have the right to know what data we collect and to request its deletion.

8. Shopify Compliance

We comply with:

  • Shopify's API Terms of Service
  • Shopify's Partner Program Agreement
  • Shopify's data protection requirements
  • Shopify's mandatory GDPR webhook specifications (customers/data_request, customers/redact, shop/redact)

We access only the minimum data scopes necessary to provide our service: read_products, write_products, read_product_listings, read_analytics, write_pixels, read_customer_events, read_themes, write_themes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via the email associated with your Shopify account. Continued use of the app after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

Email: basekit.studio@gmail.com

Response time: We aim to respond to all inquiries within 24 hours.

© 2026 Wandex. All rights reserved.