Privacy policy
Effective 29 July 2026
Swift AI Collections is a Shopify app that sorts the products inside your collections. To do that it needs your catalogue, your sales figures and how shoppers interact with your collection pages. This page describes exactly what is collected, what is not, and how long any of it is kept.
Summary
- We store store data: products, variants, collections, inventory, costs, and order line items in aggregate.
- We do not store customer names, email addresses, phone numbers, shipping addresses, payment details or IP addresses. The order query this app sends to Shopify does not request any customer field.
- Storefront tracking records which product was shown or clicked at which grid position, tied to a random identifier that lasts for one browsing session and is never linked to a customer account.
- Nothing is sold, rented, shared for advertising, or used to train machine learning models. There are no third-party analytics or advertising scripts in this app.
1. Who processes your data
Swift AI Collections operates Swift AI Collections and is the data processor for the store data described below. You, the merchant, remain the data controller for your store. Contact: inquiries@iessentialshub.com.
2. Data received from Shopify
When you install the app, Shopify grants it an access token scoped to the permissions shown on the install screen. Using that token the app reads and stores:
| Data | Why it is needed |
|---|---|
| Shop domain, currency, timezone, plan | To identify your store and interpret money values correctly. |
| Products and variants: title, handle, vendor, type, tags, status, price, compare-at price, unit cost, inventory quantity, availability, publication and creation dates, image count | These are the ranking signals. Cost drives margin; inventory drives stock-health and clearance sorting; dates drive new-arrival handling. |
| Collections: title, handle, product count, sort order, smart-collection flag | To list what can be managed and to write a new order back. |
| Orders from the last 90 days: order creation time, and per line item the product, quantity and line totals | To compute revenue, units sold, conversion and sell-through per product. No customer-identifying field is requested or stored. |
| The Shopify session: access token, and any staff account identifier Shopify includes with it | Required to call the Shopify API on your behalf. Stored in the app's database and deleted when the app is uninstalled. |
That is the complete list. In particular the app does not read Shopify's analytics or reporting data: it holds no reporting scope, and the traffic figures it uses come from its own storefront extensions, described below. It requests no customer name, email, phone or address at any point.
3. Data collected from your storefront
The app installs two optional extensions: a theme block that measures which products shoppers actually see and click, and a Shopify web pixel that observes add-to-cart and completed checkout events. Together they record, per event:
- event type (impression, click, add to cart, purchase);
- the product and collection involved;
- the grid position the product was displayed at — the signal that makes it possible to tell a genuinely popular product from one that gets clicks because it sits in the first slot;
- the market or locale prefix of the page URL;
- the line value of a purchased item;
- a random session identifier, generated in the browser and held in
sessionStorage, used only to de-duplicate impressions and to join a click to the purchase that followed it. It is discarded when the browser session ends and is never matched to a customer account, email address or order record; - a returning-visitor flag in
localStorage, which records only that this browser has seen a collection page before. It is used to order products differently for new and returning visitors when you configure a segment for that, and holds no other information.
No IP address, user agent, geolocation, device fingerprint or cross-site identifier is stored. No cookie is set. If you do not add the theme block and the app's web pixel, none of this is collected at all — the app still sorts, using catalogue and order data only.
4. What the data is used for
- Ranking the products inside your collections and writing that order to Shopify.
- The analytics and insight pages inside the app, which only you can see.
- Measuring A/B tests you choose to run on your own collections.
- Diagnosing failures in your own runs and syncs.
Your data is never combined with another merchant's, never used to build cross-store benchmarks, and never used to train models. Each store's data is isolated by shop and every query in the app is scoped to a single store.
5. Where it is stored
In a PostgreSQL database on a dedicated server operated by us and hosted by Hetzner Online GmbH in Nuremberg, Germany (European Union). The database accepts connections only from the application on the same machine and is not reachable from the internet. All traffic to the app is served over HTTPS.
6. Sub-processors
| Provider | Role | Location |
|---|---|---|
| Shopify Inc. | Source of store data; handles all billing | Per Shopify's own terms |
| Hetzner Online GmbH | Server hosting | Germany (EU) |
There are no other sub-processors: no third-party analytics, no error-tracking service, no advertising network, no CDN handling your data.
7. Retention and deletion
- Raw storefront events are aggregated into per-product counts and the raw rows are deleted within 95 days.
- On uninstall, automatic sorting stops immediately and your Shopify access token is deleted. Your configuration — strategies, rules, run history — is kept for 30 days so that reinstalling restores your setup, then deleted permanently.
- Shopify's erasure webhooks (
shop/redact,customers/redact,customers/data_request) are implemented.shop/redactdeletes everything belonging to your store immediately. The customer topics have nothing to act on, because no customer records are stored. - You can request deletion at any time, before the window expires, by emailing inquiries@iessentialshub.com.
8. Your rights
If you are in the EEA or UK, you have the right to access, correct, export, restrict and erase the data described here, and to lodge a complaint with your supervisory authority. If you are in California, you have the equivalent rights under the CCPA; we do not sell or share personal information as those terms are defined there. Email inquiries@iessentialshub.com and we will respond within 30 days. A data processing agreement is available on request.
9. Security
The app is served over TLS only. Shopify access tokens are stored in a database that is not exposed to the network, on a host with no public database port. Requests from your storefront are authenticated by Shopify's app proxy signature, and every webhook is verified by HMAC before it is processed. Administrative access to the server is restricted to key-based SSH.
10. Children
The app is a business tool sold to merchants and is not directed at children. It collects nothing knowingly from anyone under 16.
11. Changes
If this policy changes materially, the effective date above changes and merchants with the app installed are notified by email before the change takes effect. Questions: inquiries@iessentialshub.com.