Privacy Policy

Introduction

TagGPT: AI Product Tags & Taxonomy ("we", "our", or "the App") is a Shopify application that classifies your products into Shopify's official Standard Product Taxonomy using AI. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Data We Collect

When you install and use TagGPT, we access the following data from your Shopify store:

• Store information — shop name and domain.
• Product data — titles, descriptions, vendor, tags, product type, product category, and the first product image URL.

We do not collect:

• Customer personal data (names, emails, addresses, payment info)
• Order or transaction data
• Staff account credentials
• Analytics or tracking data about store visitors
• Product pricing or inventory data

How We Use Your Data

All data accessed is used solely to:

1. Classify your products into Shopify's Standard Product Taxonomy using AI (OpenAI GPT-4o mini).
2. Write the resulting product category back to your Shopify store via the productCategory field.
3. Display classification results, coverage statistics, and a review queue in the app dashboard.

We do not sell, share, or transfer your data to any third parties for advertising, profiling, or any purpose other than the core functionality described above.

Third-Party Services

TagGPT uses the following third-party service:

• OpenAI API — Product titles, descriptions, vendor names, tags, and image URLs are sent to OpenAI's API for classification. OpenAI processes this data according to their API Data Usage Policy. OpenAI does not use API data to train their models.

Data Storage & Security

We store minimal metadata (shop domain, classification results, job progress, and settings) in a secure database hosted on Fly.io. Product data is processed in real time and is not permanently stored beyond classification results (product title, suggested category, and confidence score).

All data is transmitted over HTTPS. Our infrastructure is hosted in SOC 2-compliant data centers.

Data Retention & Deletion

When you uninstall TagGPT, we automatically delete all data associated with your store within 48 hours. This includes classification results, job records, settings, and any stored metadata.

You may also request data deletion at any time by contacting us at the email below.

GDPR & CCPA Compliance

TagGPT is designed with privacy by default:

• We process only store product data — no personal customer data is collected or processed.
• We respond to Shopify's mandatory compliance webhooks for customer data requests, customer data erasure, and shop data erasure.
• EU merchants: You have the right to access, rectify, or erase your data under GDPR. Contact us to exercise these rights.
• California merchants: Under the CCPA, you have the right to know what data we collect and to request its deletion.

Shopify API Scopes

TagGPT requests only the following permissions:

• read_products — to read product data for AI classification
• write_products — to write the classified product category back to Shopify

We do not request access to customers, orders, content, or any other store data.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

Email: rahular2020@iimbg.ac.in