Privacy Policy
SmartFAQ AI by Scalefy ("we", "our", or "us") is a Shopify application that helps merchants generate AI-powered product FAQs. This Privacy Policy explains what information we collect when you install and use SmartFAQ AI by Scalefy, how we use it, and your rights regarding that information.
By installing SmartFAQ AI by Scalefy, you agree to the practices described in this policy.
01 Information we collect
Shop and merchant data
When you install SmartFAQ AI by Scalefy, we receive and store the following information from Shopify:
- Shop domain and shop ID — to identify and authenticate your store session.
- Access tokens — to make authorized API calls on your behalf (read/write products, metafields, locales, and legal policies).
- Store name and primary locale — used to configure generation settings and default language.
Product data
When you generate FAQs, we access and temporarily process:
- Product titles, descriptions, and variant options (e.g. size options)
- Your store's shipping and returns policy pages
This data is sent to our AI backend solely to generate FAQ content. We do not store product data beyond what is necessary to complete the request.
App usage data
- AI credit usage — a ledger of generation actions per shop, used for billing and plan enforcement.
- Bulk job state — queue status, progress, and error logs for background bulk generation jobs.
- Generation settings — FAQ count, tone, answer length, and language preferences you configure.
- Subscription and billing status — plan type, trial status, and usage against monthly limits.
Storefront data
Generated FAQ content is stored as Shopify product metafields (SmartFAQ AI.faqs) and optionally as a shop metafield for settings (SmartFAQ AI.settings). This data lives in your Shopify store and is governed by Shopify's data practices.
02 How we use your information
We use the information we collect to:
- Authenticate your session and connect to your Shopify store
- Generate FAQ content using your product and policy data
- Enforce plan limits and track AI credit usage
- Process bulk generation jobs in the background
- Maintain and improve the reliability of the app
- Respond to support requests and troubleshoot issues
We do not sell your data, use it for advertising, or share it with third parties for their own commercial purposes.
03 Data sharing
AI processing
Product titles, descriptions, variant data, and policy content are sent to our AI backend (a Cloudflare Worker) to generate FAQ content. This data is processed in transit and is not stored by the backend beyond the duration of the request.
Shopify
SmartFAQ AI by Scalefy is built on the Shopify platform. Shopify processes data necessary to operate the app store, billing, and storefront infrastructure. Please refer to Shopify's Privacy Policy for details.
Subprocessors
- Cloudflare — AI worker infrastructure and edge processing
- Shopify — App platform, billing, and storefront metafields
We do not share your data with any other third parties unless required by law or with your explicit consent.
04 Data retention
We retain app data (session tokens, usage ledger, billing records, and bulk job logs) for as long as your store has SmartFAQ AI by Scalefy installed. When you uninstall the app:
- Your session and access tokens are deleted within 48 hours.
- Usage ledger and billing records may be retained for up to 12 months for accounting and legal compliance purposes.
- Generated FAQ content stored in your Shopify metafields remains in your store and is controlled by you.
You can request deletion of all app data at any time by contacting us (see Section 9).
05 Security
We take reasonable technical and organizational measures to protect your data, including:
- Encrypted storage of Shopify access tokens
- HTTPS for all data in transit
- Session-based authentication via Shopify App Bridge
- Rate limiting on AI generation endpoints
No system is perfectly secure. If you believe your account or data has been compromised, please contact us immediately.
06 Your rights
Depending on your location, you may have rights under applicable privacy laws (including GDPR and CCPA) to:
- Access — request a copy of the personal data we hold about your shop
- Correction — request correction of inaccurate data
- Deletion — request deletion of your data
- Portability — receive your data in a machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at the address in Section 9. We will respond within 30 days.
07 Shopify & third parties
SmartFAQ AI by Scalefy is available exclusively through the Shopify App Store. Shopify acts as an independent controller for data collected through their platform. Our use of Shopify APIs is governed by the Shopify API License and Terms of Use.
Our app does not embed third-party tracking scripts, advertising pixels, or analytics services on your storefront.
08 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via the app or email.
Continued use of SmartFAQ AI by Scalefy after changes are posted constitutes acceptance of the updated policy.
09 Contact us
If you have questions about this Privacy Policy or want to exercise your data rights, please reach out: