Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Storenode ("Storenode," "we," "us," or "our") collects, uses, shares, and protects information in connection with the Storenode website at storenode.ai and the application at app.storenode.ai (together, the "Service"). Storenode is an independent software-as-a-service application and is not affiliated with, endorsed by, or sponsored by Shopify Inc.

Storenode turns supplier product URLs and uploaded files into publish-ready Shopify product drafts using AI — keyword research, structured copy, infographics, and SEO. We create drafts only; you review and publish them. We never auto-publish to your store.

The Service is provided by Storenode (referred to as "Storenode," "we," "us," or "our" in this policy). If you have any questions about how we handle your data, you can reach us any time at support@storenode.ai.

1. Information we collect

We collect the following categories of information:

• Account information. When you sign up, our authentication provider collects and stores your name, email address, and login credentials. We do not store your password ourselves.
• Billing information. When you start a trial or subscribe, our payment processor collects your payment details. Storenode does not store full payment card numbers; we receive only limited billing metadata (such as plan, status, and the last four digits of a card) needed to manage your subscription and usage credits.
• Product content you submit. Supplier product URLs, uploaded files (images, PDFs, documents, pasted text), keywords, and any other content you provide so we can generate product drafts.
• Connected store credentials. When you connect your Shopify store, we store the access token needed to write drafts to it. These credentials are encrypted at rest using AES-256-GCM. We use them only to create and update drafts at your direction.
• Generated output. The product drafts, copy, infographics, and SEO data we produce for you, together with job and run records (status, timestamps, credits used).
• Usage and analytics data. Events about how you use the Service, plus standard technical data such as IP address, browser type, device information, and pages viewed, used to operate, secure, and improve the Service.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service and generate the drafts you request;
• Authenticate you and manage your account;
• Process payments, manage subscriptions, and meter usage credits;
• Create and update product drafts in the Shopify store you connect;
• Communicate with you about your account, transactions, and support requests;
• Monitor, secure, debug, and improve the Service; and
• Comply with legal obligations and enforce our terms.

Our legal bases for processing (where the GDPR applies) include performance of our contract with you, our legitimate interests in operating and improving the Service, your consent where required, and compliance with legal obligations.

3. AI processing

Storenode is an AI-powered product. To generate drafts, we send the product content you submit (and content fetched from supplier URLs you provide) to established third-party AI providers for processing. This processing is used to research keywords, write product copy, generate infographics and images, and perform SEO work.

We send these providers only the content needed to perform the requested task. We do not sell your data, and our use of these providers is governed by their respective terms and data-processing commitments. We do not use your content to train our own models.

4. Sub-processors and third-party services

We rely on established third-party service providers ("sub-processors") in the following categories to operate the Service. Each receives only the data necessary for its function:

We may update these categories as our Service evolves. Material changes will be reflected here and, where required, communicated to you.

5. Data retention

We retain your account and billing records for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Uploaded files and generated output are retained to operate the Service and provide your history; you may request deletion of your content as described below. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we are required or permitted by law to retain it.

6. Security

We take reasonable and appropriate technical and organizational measures to protect your data. These include encryption of connected Shopify store credentials at rest using AES-256-GCM, encryption of data in transit using TLS, authentication managed through a dedicated authentication provider, and access controls that limit who and what can reach your data. No method of transmission or storage is completely secure, but we work to protect your information and to never publish to your store without your action. See our Security page for more detail.

7. Your rights and choices

Depending on where you live, you may have rights over your personal data, including the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your personal data;
• Export (port) your data in a portable format;
• Object to or restrict certain processing; and
• Withdraw consent where processing is based on consent.

These rights reflect protections under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and similar laws. We do not sell your personal data. To exercise any right, email us at support@storenode.ai. We will respond within the timeframes required by applicable law and may need to verify your identity first.

8. Cookies and analytics

We use cookies and similar technologies that are necessary to operate the Service — for example, to keep you signed in and to maintain your session. We also use limited analytics to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service from working.

9. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. International data transfers

Storenode and our sub-processors may process and store data in countries other than the one in which you reside, including the United States. Where personal data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law to protect it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take additional steps to notify you where required. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have questions about this Privacy Policy or our handling of your data, contact us at support@storenode.ai. Storenode is the data controller for the Service, and you can reach us about any data-protection matter at that same address.