1The short version#
- Fixora connects to your Shopify store with read-only access. It cannot change your store.
- We use your store’s analytics summaries, page information and theme code only to produce suggestions for you.
- We do not sell your data. We do not use your data to advertise.
- An AI provider processes parts of your data to write suggestions (details in section 5).
- You can disconnect at any time, and you can ask us to delete your data.
2What we collect#
a) Information you give us
- When you request a free audit on this website: your email address, your store address (.myshopify.com) and, if you choose to give it, your role (owner, developer or agency). When you create an account, your name too if you provide it.
- Messages you send us.
- Your decisions inside Fixora: approving or rejecting a suggestion, the reason you give, who a task is assigned to, and its status.
b) Information from your Shopify store (after you connect)
We request two read-only permissions: read reports and read themes. Through them we receive:
- Aggregated store analytics for roughly the last 15 days: sessions, conversion, bounce, traffic sources, devices, checkout funnel, page performance (sales totals and counts by page, source and device).
- Theme files (the code that builds your pages), used to write a change that fits your store.
- Your store’s domain and an access token. The token is encrypted before it is stored.
We do not ask for permission to read customer records, orders or personal customer details, and we do not intentionally store them. Our reports are aggregated. [Confirm this against the live scopes before publishing.]
c) Information collected from your public storefront
With your storefront address, Fixora loads your public pages on desktop and phone sizes, takes screenshots, and notes things like whether the add-to-cart button is visible without scrolling. If your storefront is password-protected and you give us the password for this purpose, we use it only to load your pages.
d) Technical data
Basic logs such as IP address, browser type, timestamps and error information, used for security and to keep the service working. When you use the audit form on this website, your IP address is used only to limit repeated submissions and to block bots; we do not save it with your request, though our hosting provider's request logs may record it.
3How we use it#
- To analyse your store and generate suggestions, impact estimates and code changes.
- To show suggestions to the right people in your workspace and track them from To do to Live, with a before/after comparison.
- To run, secure, debug and improve Fixora.
- To reply to you about your audit or account.
- To meet legal obligations.
We do not use the information for any purpose unrelated to providing Fixora to you.
4Nothing changes in your store without a person#
Fixora never writes to your store. Suggestions are approved by the owner and applied by a person (your developer). We recommend applying changes to a duplicate of your theme first.
5AI processing#
To write suggestions, Fixora sends the following to an AI service provider: analytics summaries, page-crawl results, page screenshots, and short excerpts of your theme code. Our current provider is [Google (Gemini) / name each provider you actually use]. [State whether the provider is used under terms that prevent it from training on your data.] AI-generated suggestions can be wrong or incomplete; impact figures are estimates, not promises. A person should review every change.
7Where data is stored#
Data is stored and processed on servers in [country/region], and our providers may process it in other countries. Where required, we rely on appropriate safeguards for transfers.
8How long we keep it#
- Store data, crawl results and suggestions: while your store is connected, then deleted within [30] days of disconnection or a deletion request.
- Encrypted access token: deleted when you disconnect or uninstall.
- Audit requests (email, store address) if you don’t become a user: up to [12] months.
- Logs: up to [90] days.
- Backups may hold data for a short additional period before they expire.
9Security#
We encrypt access tokens, use HTTPS, separate workspaces, and limit who can reach production data. No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.
10Your choices and rights#
- Disconnect Fixora any time from the app, or by removing it from your Shopify admin. Access ends immediately.
- Delete your store’s data from Fixora, or ask us at [privacy email].
- Access, correct or export the personal data we hold about you.
- Object to or limit certain uses, or withdraw consent where we rely on it.
- Depending on where you live (for example India under the Digital Personal Data Protection Act, 2023, or the EU/UK under GDPR), you may have further rights, including to complain to the data protection authority. We reply within [30] days.
11Shopify privacy requests#
Fixora handles Shopify’s data-request and data-erasure notices (customer data request, customer redact, shop redact). Because we do not store personal customer data, a shop deletion request removes the shop’s record and everything linked to it.
13Children#
Fixora is for businesses and is not directed to anyone under 18. We do not knowingly collect their data.
14Changes#
If we change this policy in a meaningful way, we will update the date above and notify you by email or in the app before it takes effect.
15Contact#
[Legal name], [address], [privacy email]. [Grievance officer name and email, required in India for data processing.]