Privacy Policy

1. Introduction

iWAND (“we”, “our”, or “us”) is a Shopify App that provides AI-powered style and product recommendations to fashion merchants and their customers (the “Service”). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and disclose it, and your choices regarding your information when you install or use our App via the Shopify App Store.

2. Scope

This Policy applies to:

• Shopify merchants (“Store Owners”) who install and configure the iWAND App on their store.
• End-users (“Customers”) of those stores who interact with the iWAND widget.

3. Information We Collect

We collect two broad categories of data:

3.1 Personal Information

Store Owner Data: name, email, Shopify store URL, billing and usage data, credentials or tokens needed to integrate with your store. This includes permissions to view products (to train our AI on your store's inventory for recommendations) and edit your online store (to add the conversational widget to your store's theme).

Customer Data: We do not collect Customers' names, email addresses, phone numbers, or postal addresses. When a Customer interacts with the iWAND widget, we process a randomly generated session identifier, widget interactions (such as messages, product views, and recommendations shown), and any images the Customer chooses to upload. These are not linked to the Customer's identity. We also receive order data from Shopify, as described in Section 4A.

3.2 Non-Personal and Technical Data

• Browser type/version, operating system, screen resolution, language settings.
• Usage metrics (clicks, session duration, widget engagement), analytics data collected via cookies or similar tracking on the merchant’s storefront.

4. How We Use Your Information

We use collected data to:

• Provide and personalize AI fashion recommendations, including processing anonymous image uploads for similar or matching product suggestions.
• Improve and optimize the functionality and performance of the App.
• Communicate with Store Owners about setup, updates, support, and billing.
• Analyze usage patterns for feature development and troubleshooting.
• Send marketing or promotional messages (Store Owners may opt out at any time).

4A. Shopify Order Data

What we receive. With the Store Owner's permission, iWAND receives order information from Shopify for every order placed on the store after the App is installed, including order updates, cancellations, and refunds. We use only the following fields: order ID and number, order date, products and variants purchased, quantities, prices, discounts, totals, currency, order and payment status, refund and cancellation amounts, and the iWAND session reference attached to the order. We do not request or store Customer names, email addresses, phone numbers, or addresses.

Why we use it. We use order data only to (a) determine which sales were influenced by iWAND, (b) calculate the usage-based fees shown in the Store Owner's plan, and (c) show sales and performance analytics in the Store Owner's iWAND dashboard. We do not use order data for advertising, we do not sell it, and we do not combine one store's order data with another store's for any purpose.

Our role. For Customer data, the Store Owner is the data controller and iWAND acts as a data processor (or "service provider") on the Store Owner's behalf. We process this data only on the Store Owner's instructions, which are set out in our Data Processing Terms.

Consent. iWAND follows the cookie and privacy choices Customers make through the store's consent banner, using Shopify's Customer Privacy API. If a Customer declines analytics tracking, iWAND does not record that Customer's browsing events. Order processing for billing does not rely on cookies.

No sale or automated decisions. We do not sell Customer data or share it for cross-context behavioral advertising. iWAND's recommendations are product suggestions only. They do not produce legal or similarly significant effects on Customers.

5. Third-Party Services & Sharing

We do not sell or rent your Personal Information. We may share information in the following limited cases:

• Hosting & Infrastructure: AWS, Google Cloud, or similar providers for data storage and processing.
• Analytics & Monitoring: Google Analytics and Hotjar on our own website (iwand.style), and Shopify Analytics for aggregate usage insights.
• Legal Compliance: If required by law or to protect our rights.

All service providers are contractually bound to maintain the confidentiality and security of your information.

6. Data Retention

• Store Owner account data: kept while the App is installed. After uninstall, we delete it within 30 days of receiving Shopify's shop deletion request, except billing and invoice records, which we keep only as long as tax and accounting law requires.
• Order data: kept while the App is installed, to calculate fees and show dashboard history. It is deleted with the rest of the store's data after uninstall, except records needed for billing as stated above.
• Widget session and interaction data: up to 12 months, after which it is deleted or fully anonymized.
• Uploaded images and temporary analysis files: up to 30 days.
• Customer requests: When a Customer asks a store to access or delete their data, Shopify forwards the request to us and we respond within 30 days.

7. Security

We implement industry-standard administrative, physical, and technical safeguards to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no system is 100% secure—please take care with your account credentials.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your Personal Information.
• Object to or restrict processing.
• Data portability.

To exercise these rights, please contact us as below. We will respond within applicable legal timeframes.

9. International Data Transfers

Your information may be stored or processed in servers located outside your country. We rely on EU-approved standard contractual clauses, adequate safeguards under local law, or your consent for international transfers.

10. Children’s Privacy

Our Service is not intended for individuals under 16. We do not knowingly collect or maintain Personal Information from minors. If you become aware that a minor has provided us Personal Information, please contact us to have that data deleted.

11. Cookies & Tracking Technologies

iWAND uses cookies and similar storage on merchant storefronts to keep a widget session and to measure widget engagement. These are used only when the Customer has allowed analytics through the store's consent banner, except for storage strictly needed for the widget to work. Customers can change their choice at any time through the store's cookie settings or their browser settings.

12. Changes to This Policy

We may update this Policy when necessary (e.g., to reflect new features or legal requirements). Changes will be posted with a revised “Last updated” date. We will notify Store Owners by email of material changes. Your continued use of the App after changes indicates acceptance.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

METABYTE PORTAL L.L.C.
Email: [email protected]
Address: 2905-4650 Brentwood Blvd

Data Processing Terms

These terms apply between the Store Owner and METABYTE PORTAL L.L.C. when the Store Owner installs the App. For Customer data, the Store Owner is the data controller and iWAND acts as a data processor (or "service provider") on the Store Owner's behalf. We process Customer and order data only on the Store Owner's instructions and only for the purposes in Section 4A. Retention and deletion follow Section 6. We do not sell Customer data or share it for advertising.