Privacy policy
Last updated 16 October 2026
This policy explains what Shoplistd collects when you use shoplistd.com, the free store check and the Shoplistd app for Shopify, and what we do with it. Shoplistd (“we”, “us”) is the controller for data collected on this website and the free check, and a processor for store data we handle on a merchant's behalf inside the app. You can reach us at hello@shoplistd.com.
The free store check
When you run a check we store:
- the store address, product category, country and city you enter
- your email address, if you give one, so we can send the full report
- a one-way hash of your IP address, used only to limit how many checks one person can run in a day
- the questions we asked and the answers the AI assistants gave
We keep check results for up to 12 months so repeat checks are fast and so we can improve our question sets. We only email you about your report and, if you agree, occasional product news. You can unsubscribe from any email.
The Shoplistd app
When a merchant installs Shoplistd, Shopify gives us access to the data the merchant approves. We use it only to provide the service.
| Data | Why we use it |
|---|---|
| Shop name, domain, contact email, business address, currency and the countries the shop ships to | To set up your markets, ask questions as a shopper there, and send your weekly email |
| Products: titles, descriptions, types, tags, options, variants, prices, barcodes, images and SEO fields | To write shopper questions, check product readiness and suggest fixes. We keep the previous version of any field we change so you can undo it. |
| Orders that came from an AI assistant: order ID, total, currency, country, product IDs and which assistant sent it. We read the order's referrer and landing page to decide this but don't keep them. | To count sales that came from AI assistants. We do not store customer names, emails, phone numbers or addresses. |
| Storefront visits from AI assistants: which assistant, the landing page path and product, and the country | To count AI-referred visits. The Shoplistd pixel only runs when the shopper has allowed analytics, and sends only the referrer and page address. |
AI assistants we query
To measure visibility we send shopper-style questions, such as “Where can I buy the best dog raincoat in the UK?”, to AI providers through their official APIs, with the market's country and, for local markets, city. When you ask us to write a product fix, we may send that product's details to an AI provider to draft it. We never send shopper or customer personal data to AI providers.
Who processes data for us
| Provider | What for |
|---|---|
| Shopify | App platform, billing and store data |
| Our hosting and database providers | Running the app and storing data |
| OpenAI (ChatGPT), Anthropic (Claude), Perplexity, Google (Gemini), Moonshot AI (Kimi) and xAI (Grok) | Answering shopper questions; drafting fixes |
| Resend | Sending report and weekly emails |
| Web3Forms | Delivering messages from the contact form |
| Intuition Machines (hCaptcha) | Checking that a contact form submission is from a person |
Some of these providers process data outside your country, including in the United States, and Moonshot AI in China. Where the law requires it, we rely on standard contractual clauses or an equivalent safeguard. Only Kimi checks send questions to Moonshot AI, and only Grok checks send questions to xAI. Those questions contain no personal data.
This website
shoplistd.com does not use advertising or tracking cookies. Our host keeps standard server logs, such as IP address and pages requested, for security for a short time. Fonts load from Google Fonts, which receives your IP address when you visit.
The contact form collects your name, email address and message so we can reply. Those details are sent through Web3Forms to hello@shoplistd.com. Before a message is sent, hCaptcha asks you to confirm you are a person. That check is handled by Intuition Machines and can include your IP address and browser details.
How long we keep data
- App data is kept while Shoplistd is installed. When a store uninstalls the app, Shopify asks us to delete the store's data 48 hours later, and we delete it then.
- Free check data is kept for up to 12 months.
- Billing records are kept as long as tax law requires.
Your rights
Depending on where you live, you can ask to see, correct, delete or export the personal data we hold about you, or object to how we use it. Email hello@shoplistd.com and we will reply within 30 days. If you are a shopper at a store that uses Shoplistd, contact that store; we hold no personal data about you. You can also complain to your local data protection authority.
Security
Data is encrypted in transit, access is limited to the people who run the service, and Shopify access tokens are stored securely and used only for the permissions the merchant approved.
Changes
If we change this policy in a way that matters, we'll update the date above and tell installed merchants by email.