Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how IntentSea ("IntentSea", "we", "us") handles data in connection with IntentSearch, our AI-powered search, filtering and autocomplete app for Shopify stores (the "App"). It applies to merchants who install the App and to shoppers who use search on a merchant's storefront.

1. What the App does

IntentSearch adds AI-powered search, filters and autocomplete to a Shopify storefront. To do this it reads the merchant's product catalog and collections and serves search requests to the storefront through a Shopify app proxy.

2. Data we process

From merchants:

• Shop identity and installation details provided by Shopify (shop domain, installation status, plan-related settings needed to run the App).
• Product catalog and collection data (titles, descriptions, variants, prices, images, tags, collections, availability), accessed with the read_products scope. The App does not write to your store.
• Merchant contact details if you email us (for example for support).

From shoppers on a merchant's storefront:

• Search queries and filter selections entered into the search box.
• Anonymous interaction events: result impressions, clicks and add-to-cart actions, used to improve ranking and to show analytics to the merchant.
• Basic technical data needed to serve requests (such as IP address and user agent), which is processed transiently by our servers and Cloudflare for delivery, security and abuse prevention.

What we do not collect: shopper names, email addresses, postal addresses, phone numbers, payment or card data, or order contents. The App does not read customer or order records.

3. Anonymous identifiers and Do Not Track

Interaction events are linked only to an anonymous, session-scoped identifier that is not tied to a person's identity and does not follow a shopper across different stores. We honour the browser's Do Not Track signal: when it is enabled, interaction events are not recorded.

4. How we use data

• To provide, maintain and secure the App (search, filtering, autocomplete).
• To improve search relevance and ranking.
• To show merchants analytics about searches and engagement in their own store.
• To provide support and to comply with legal obligations.

We do not sell personal data and we do not use shopper data for advertising. Data from one merchant is not shown to other merchants.

5. Retention

• Raw interaction events are kept for 180 days and then deleted.
• Product catalog and collection data are kept while the App is installed.
• When the App is uninstalled, the shop is deactivated. When Shopify sends the shop/redact webhook (48 hours after uninstall), all data for that shop is deleted. Backups roll off on their normal schedule afterwards.

6. Shopify privacy webhooks

The App handles Shopify's mandatory data-protection webhooks: customers/data_request, customers/redact and shop/redact. Because the App does not hold personally identifiable customer information, customer requests result in no customer data being found or deleted; shop data is deleted as described above.

7. Hosting and service providers

The App runs on servers operated by IntentSea. We use Cloudflare for CDN and edge delivery, secure tunnelling and encrypted backup storage (R2). Cloudflare acts as a processor on our behalf. Data may be processed in countries other than your own; where required, we rely on appropriate safeguards such as standard contractual clauses.

8. Security

We use encryption in transit, access controls and regular backups to protect data. No system is perfectly secure, but we work to limit access to what is necessary.

9. Your rights (GDPR, CCPA and similar laws)

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to not be discriminated against for exercising your rights. California residents may also request disclosure of what is collected; we do not sell or share personal information as defined by the CCPA. Because we hold no directly identifying shopper data, shoppers should first contact the store they shopped at, which can relay requests to us through Shopify. You can also email us directly at [email protected]. You may lodge a complaint with your local data protection authority.

10. Children

The App is intended for merchants and is not directed at children under 16.

11. Changes

We may update this policy and will change the "Last updated" date above. Material changes will be communicated to merchants where appropriate.

12. Contact

IntentSea, [email protected].