Privacy policy

Last updated: September 6, 2026.

Data controller

Dropstore

Data we process

We process account identity data, connected Shopify store data, saved prompts, AI responses, audit results, and subscription status required to operate Dropstore.

Shopify access tokens are stored encrypted. We do not request customer or order data.

Services involved

Data can be processed by Google for sign-in and performance data, Shopify for store access, Stripe for billing, OpenAI and OpenRouter for AI features, and our database and hosting providers.

Retention and deletion

Technical page data is retained for up to 30 days, scans for up to 90 days, and proposed changes for up to 180 days. Store-scoped data is deleted after Shopify sends a valid shop-redaction request.

Your rights

You can request access, correction, deletion, restriction, or export of your personal data by contacting us. Applicable law may also give you a right to object or complain to a supervisory authority.