Legal

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how StoreOperator AI (operated by Ecom Workshop Studio) collects, uses, and protects your personal information when you use our services at ecomworkshopstudio.com.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Account information: Name, email address, password (hashed), and billing information.

Store data: URLs of e-commerce stores you submit for auditing. We analyze publicly accessible content on these pages (product descriptions, CTAs, images, page structure) to generate audit results.

Usage data: How you interact with our platform — features used, pages visited, audit history, and session data — collected automatically to improve the service.

Communications: Messages you send us via email or in-app chat.

2. How We Use Your Information

We use the information we collect to:

•• Provide, maintain, and improve StoreOperator AI

•• Process payments and manage your subscription

•• Send service notifications, audit reports, and weekly summaries

•• Respond to your questions and support requests

•• Analyze usage patterns to build better features

•• Comply with legal obligations

We do not sell your personal data to third parties. Ever.

3. Data Storage & Security

Your data is stored on secure servers hosted by Vercel and Supabase, with infrastructure located in the United States and European Union.

We implement industry-standard security measures including:

•• Encrypted connections (TLS 1.2+) for all data in transit

•• Encrypted storage for sensitive data at rest

•• Hashed passwords using bcrypt

•• Regular security audits and vulnerability testing

•• Access controls limiting who can view your data

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Cookies & Tracking

We use cookies and similar tracking technologies to:

•• Keep you signed in to your account (session cookies)

•• Remember your preferences

•• Analyze usage of our platform (analytics)

•• Prevent fraud and abuse

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our service.

We use the following third-party services that may set cookies: Vercel Analytics (performance), Stripe (payments). We do not use advertising or cross-site tracking cookies.

5. Third-Party Services

We use trusted third-party services to operate StoreOperator AI:

•• Vercel — hosting and deployment infrastructure

•• Supabase / PostgreSQL — database storage

•• OpenAI — AI analysis (store content is processed to generate audit results; we do not train OpenAI models on your data)

•• Stripe — payment processing (we never store your card details)

•• Resend — transactional email delivery

Each of these services has its own privacy policy governing their use of your data.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

•• Access: Request a copy of the personal data we hold about you

•• Correction: Ask us to correct inaccurate or incomplete data

•• Deletion: Request deletion of your personal data ("right to be forgotten")

•• Portability: Receive your data in a structured, machine-readable format

•• Objection: Object to certain types of processing

•• Restriction: Request that we limit how we process your data

To exercise any of these rights, email us at contact@ecomworkshopstudio.com. We will respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and to opt out of the sale of personal information (note: we do not sell personal information).

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you close your account:

•• Audit results and store data are deleted within 30 days

•• Billing records are retained for 7 years as required by law

•• Anonymized usage analytics may be retained indefinitely

You can request immediate deletion of all your data by contacting us at contact@ecomworkshopstudio.com.

8. Children's Privacy

StoreOperator AI is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our website at least 14 days before the changes take effect. Your continued use of the service after the effective date constitutes your acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us:

Email: contact@ecomworkshopstudio.com

Company: Ecom Workshop Studio

Website: ecomworkshopstudio.com

For data deletion or access requests, please email us with the subject line "Privacy Request".