ShelfSight · Privacy Policy
Effective October 4, 2026
ShelfSight is a Shopify app that shows merchants where their products appear in AI shopping answers (ChatGPT, Perplexity, Gemini, Claude, Google AI Overviews). This policy describes what data the app touches and why.
ShelfSight is operated by Francesco Donnini (ABN 79 186 451 498), a sole trader based in Australia.
Store data. Our required permission is read and write access to products. We read your product catalog (titles, descriptions, prices, images, status) to audit your product data and suggest prompts, and we store your shop domain, your chosen prompts, and named competitors. We change a product field only after you confirm the change in the app.
Store contact. We read your store’s name and contact email address from Shopify, so the app’s reports reach you.
Scan results. We store the answers AI engines return for your prompts, including the sources they cite, so we can show stability over time. These answers come from the engines, not from your store.
Support conversations. Messages you send through the in-app support page are stored so we can answer them and improve our answers.
Order sources (optional, off by default). If you turn on “Orders AI assistants sent you”, you grant Shopify’s optional order permission and we read your orders from the last 60 days. For each order we keep only its ID, its date, which AI assistant (if any) sent the visit before it, and the website or tag that named the assistant. We delete these rows after 60 days, when you turn the feature off, and on redaction requests.
The free report on this website. When you run the free AI visibility report, we fetch the store’s public product feed, log the store domain you enter with the time of the check, and keep the result (with any competitor domain you added) in a short-lived cache for about 6 hours. We use your IP address only to rate-limit requests: it sits in a counter that expires within an hour and is never stored with the report.
Stores we’ve written to. When we check a store’s public pages before emailing its owner about ShelfSight, we keep that store’s public web address and the questions we asked, for 90 days, so that if the store installs the app its first scan can start from the same questions. If the store does install and uses them, we keep that record until the end of the month in which the store used them, because it counts toward that month’s scan spending limit. We keep no names or email addresses with them, and we delete them, or remove the questions on request when a store has already used them: email support@getshelfsight.com.
Customer personal information: none. ShelfSight does not request, read, or store your customers’ names, emails, phone numbers, addresses or order contents. Beyond products, order reading is optional and stays off until you turn it on.
Solely to operate the service: scanning, scoring, feed auditing, reports, and support. Aggregated, anonymized statistics (for example, “X% of scanned stores are invisible on budget-capped prompts”) may appear in our published content; they never identify a store.
ShelfSight reads your store’s contact email from Shopify. We send automatic emails (the weekly report and drop alerts on paid plans, and a note from the founder) only after you turn email on in the app, and every one has an unsubscribe link. You can turn email off at any time on the app’s Support page. Emails you ask for, such as “Email me this report” or a reply to a support question, go to that same address.
If you choose to share results with an agency on the app’s Reports page, we email that address your store’s weekly counts and a link to a private report page, only after the agency confirms it wants them. You can stop sharing at any time on the Reports page, which deletes the link, and uninstalling the app deletes it at once. The agency can unsubscribe from any of these emails. If it does, we delete its links to every store and keep only its email address, on a do-not-email list, so no store can add it again.
Your tracked prompts are sent to AI engine APIs (OpenAI, Perplexity, Google, Anthropic, and SerpAPI) to retrieve the answers we analyze. Anthropic also receives your store name and up to 20 product titles, types and brands to draft buying questions for you; your scan results, the catalog facts they were checked against (product names, prices, stock), your top feed audit findings and the names of competitors you track, to write your weekly report; and any support message you send us, to draft a reply. Orders and customer data are never sent to an AI API. Reports, digests and notices to us (for example a customer’s data request) are delivered by Resend (email). The app is hosted on Fly.io with data stored in Postgres. We do not sell data to anyone.
Uninstalling the app ends our access to your store at once. About 48 hours after you uninstall, Shopify sends the shop/redact webhook, and on it we erase every stored row for your shop: prompts, competitors, scan results, order sources, reports, agency links, profile, and the outreach questions your store started from. You can also email us for immediate deletion.
We subscribe to all three mandatory Shopify compliance webhooks (customers/data_request, customers/redact, shop/redact). We hold no customer personal data. If order sources are on, customers/redact deletes the rows for that customer’s orders and customers/data_request sends you the rows we hold for the requested orders; shop redaction deletes everything.
Questions or deletion requests: support@getshelfsight.com.