Privacy Policy — Shop The Look

Last updated: September 23, 2026

Merchentia (“we”, “us”) operates the Merch - Shop The Look Shopify app (the “App”). This policy explains what data the App accesses, stores, and shares.

Summary

The App does not collect, store, or process any personal data about your customers (shoppers). To build its “complete the look” recommendations, the App analyses your own product catalogue and product images — never shopper data. Add-to-cart happens in the shopper’s browser through Shopify’s own cart.

What the App stores

• Shop session credentials — an access token and basic shop identifiers (your *.myshopify.com domain), used to authenticate the App and operate the embedded admin.
• A copy of your product catalogue — for the products in your store, the App mirrors product titles, handles, types, vendors, tags, prices, status, stock availability, colour options, variant SKUs and barcodes, the values of product metafields you have defined, image URLs, sales-channel publication, and collection membership. The App requests only read-only permissions — read_products and read_publications for your catalogue, and read_themes to check whether its widget block is on your product page. It has no access to your customers or orders.
• Recommendation data derived from your product images — the items detected in each product image, numeric “embeddings” (mathematical representations used to find visually similar products), and the resulting look recommendations. These are cached so the storefront widget loads quickly. We store the Shopify URL of your images and these analysis results — we do not keep copies of your image files.
• Your settings and edits — your App settings, any changes you make to a look, and anonymous daily counts of how often the widget was shown, clicked, and used to add to cart. These counts contain no information about individual shoppers.
• We store no customer names, emails, addresses, payment details, browsing data, or order information.

AI sub-processors

Building looks requires analysing your product images. To do this, the App sends your product images and product text (e.g. titles and types) to the following providers, which act as our sub-processors:

• Anthropic — to detect the fashion items shown in your product images.
• Voyage AI (an Anthropic company) — to generate the image and text embeddings used to match items to your catalogue.

These providers process the images and text solely to return analysis results to the App and do not use your data to train their models. Only your own product images and text are ever sent — never any shopper data. This analysis runs in the background at the time you sync or generate looks, never during a shopper’s visit.

What the App does not do

• It does not read or store your customers’ personal information.
• It does not process payments. Subscription billing is handled entirely by Shopify Billing; we never see card or payment details.
• The storefront widget does not send shopper data to us or to any AI provider — it only fetches the pre-computed look recommendations for the product being viewed and adds items to cart via Shopify’s storefront cart.

Data sharing

We do not sell or rent your data. We share data only with the service providers needed to run the App: Shopify (hosting your store, installation, authentication, billing), our hosting provider (which stores the catalogue copy and recommendation data), and the AI sub-processors named above (Anthropic and Voyage AI, for image analysis).

GDPR / data requests

Although the App stores no shopper personal data, it implements Shopify’s mandatory compliance webhooks:

• customers/data_request and customers/redact — acknowledged (no customer data is held to return or delete).
• shop/redact — sent by Shopify about 48 hours after you uninstall. On receiving it we delete your shop’s stored data (everything listed above), within the 30 days Shopify allows — unless you have reinstalled the App, in which case your data is in use again and is kept.

Uninstalling the App revokes its access immediately. Your stored data is kept for at least 48 hours so that an accidental uninstall can be undone: reinstall before it is deleted and your catalogue copy, looks and edits are still there. (Uninstalling also cancels any paid plan through Shopify, so after reinstalling you choose a plan again.) Your data is deleted after Shopify sends shop/redact.

Data retention & security

Your catalogue copy and recommendation data are retained while the App is installed and for at least 48 hours after you uninstall it. They are deleted after Shopify’s shop/redact request, within the 30 days Shopify allows. Deleted data may remain for a limited period in our hosting provider’s encrypted backups until those backups expire. Data is stored on our hosting provider using industry-standard security.

Contact

Questions about this policy or your data: ask@merchentia.com.