Privacy Policy for Titan AI Store Builder

Effective Date: October 21, 2025

1. Introduction

Welcome to Titan AI Store Builder ("Titan," "we," "us," or "our"), an AI-powered Shopify app developed by Titan, located in Somerset, PA, United States. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our app available at https://apps.shopify.com/titan (the "App"). The App helps Shopify merchants ("Merchants" or "you") build and optimize online stores using AI-driven tools, including theme creation, review imports, bundle building, and more.

By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not install or use the App. This Policy applies to information we collect from Merchants and, in some cases, from end-users of Merchants' stores ("Customers"). We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and Shopify's data processing requirements.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

2. Information We Collect

We collect information to provide, maintain, and improve the App's features. The types of information we collect depend on your plan (Basic, Pro, or Expert) and how you interact with the App. We access data through Shopify's API with your explicit permission during installation.

2.1 Personal Information

Merchant Information: When you install the App, we collect your name, email address, phone number, physical address, and billing details (processed via Shopify). We also access your Shopify store owner details.
Customer Information: For features like order tracking, review imports, or bundle suggestions, we may access Customers' name, email address, phone number, physical address, geolocation, IP address, browser type, and operating system. This is limited to data necessary for App functionality, such as importing Amazon reviews (Expert plan) or processing orders.
Content Provider Information: If you integrate with third-party services (e.g., Amazon, Aliexpress, Loox), we may collect email addresses, IP addresses, and browser details from those providers.

2.2 Store Data

Products and Inventory: We access and may edit product listings, inventory, variants, collections, publications, and selling plans to enable AI theme generation, bundle creation, and SEO optimization.
Orders and Discounts: We view and edit order details (including fulfillments, returns, and the last 60 days of orders), discount codes, and promotions for features like order tracking with 17track and bundle upsells.
Online Store Content: We access and edit themes, pages, metaobjects, navigation, locales, locations, files, legal policies, and payment terms to build and customize your store.
Other Data: Usage data such as app interactions, AI-generated themes, logos, and analytics on store performance.

2.3 Automatically Collected Information

Usage Data: Device information, IP address, browser type, operating system, referral sources, pages viewed, and timestamps when you use the App.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track usage, preferences, and performance. These may include session cookies (temporary) and persistent cookies (long-term). You can manage cookie preferences through your browser settings.

2.4 AI-Specific Data

Our AI features (e.g., theme generation, logo design, SEO tools) process your store data to create customized outputs. We do not use your personal data for training external AI models without consent. However, aggregated and anonymized data may be used to improve our AI algorithms.

We do not collect sensitive personal information (e.g., racial or ethnic origin, political opinions, health data) unless required for a specific feature and with your explicit consent.

3. How We Collect Information

Directly from You: During App installation, account setup, or when you provide feedback or support requests.
Through Shopify: Via OAuth permissions granted during installation, allowing access to your store data.
From Third Parties: Integrations with services like Amazon (for review imports), Aliexpress, or Judge.me may provide data with your authorization.
Automatically: As you use the App, through logs and analytics tools.

4. How We Use Your Information

We use collected information for the following purposes:

Providing Services: To build and customize your store, import reviews, create bundles, optimize SEO, track orders, and provide support (e.g., VIP support in Expert plan).
Improving the App: Analyze usage to enhance features, fix bugs, and develop new tools. This includes using AI to generate themes and logos based on your branding.
Billing and Administration: Process payments via Shopify, manage subscriptions, and communicate about your account.
Marketing and Communications: Send updates, newsletters, or promotional offers (you can opt out). We may use data for personalized recommendations.
Compliance and Security: Detect fraud, ensure compliance with laws, and protect against unauthorized access.
Analytics: Generate insights on store performance, such as bundle effectiveness or review impacts, without identifying individuals.

We process data under legal bases such as your consent (e.g., during installation), contract performance (to provide App services), legitimate interests (e.g., improving security), or legal obligations.

5. Sharing and Disclosure of Information

We do not sell your personal information. We may share data in these limited circumstances:

With Shopify: As required to integrate with your store and comply with Shopify's policies.
Service Providers: Third-party vendors for hosting, analytics (e.g., Google Analytics), AI processing, payment processing, or support. These providers are contractually bound to protect your data and use it only for specified purposes.
Integrations: With authorized third parties like Amazon or Loox for features like review imports. Data shared is minimized and subject to their privacy policies.
Business Transfers: In the event of a merger, acquisition, or sale, your data may be transferred with appropriate safeguards.
Legal Requirements: If required by law, subpoena, or to protect rights, property, or safety.
Aggregated Data: Anonymized data may be shared for research or marketing without identifying you.

6. Data Storage and Security

Your data is stored on secure servers in the United States and other locations compliant with data protection standards. We use industry-standard measures, including encryption (e.g., SSL/TLS), access controls, firewalls, and regular security audits, to protect against unauthorized access, alteration, or destruction.

Despite these efforts, no system is completely secure. We cannot guarantee absolute security but commit to notifying you and authorities of data breaches as required by law (e.g., within 72 hours under GDPR).

7. International Data Transfers

If you are outside the United States, your data may be transferred to and processed in the US. We ensure transfers comply with laws like GDPR using Standard Contractual Clauses or other approved mechanisms.

8. Data Retention

We retain data as long as necessary for the purposes outlined, typically while your account is active plus a reasonable period for backups and legal requirements (e.g., 7 years for financial records). You can request deletion, and we will anonymize or delete data unless legally required to retain it.

9. Your Rights and Choices

Depending on your location, you may have rights under GDPR, CCPA/CPRA, or other laws:

Access: Request a copy of your data.
Correction: Update inaccurate information.
Deletion: Request removal of your data (subject to exceptions).
Objection/Restriction: Object to processing or restrict it.
Portability: Receive data in a portable format.
Opt-Out: From marketing emails, cookie tracking, or sales of personal information (we do not sell data).
Non-Discrimination: We won't discriminate for exercising rights.

To exercise rights, contact us at support@titanstorebuilder.com. We respond within 30-45 days, depending on the law. For CCPA, California residents can designate an agent.

Merchants are responsible for Customer data privacy compliance in their stores.

10. Cookies and Do Not Track

We use cookies for essential functions and analytics. You can disable cookies in your browser, but this may limit App functionality. We honor Do Not Track signals where applicable.

11. Children's Privacy

The App is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we learn of such collection, we will delete it promptly.

12. Third-Party Links

The App may link to third-party sites (e.g., Shopify, Amazon). We are not responsible for their privacy practices. Review their policies.

13. Changes to This Privacy Policy

We may update this policy. Changes will be posted here with the effective date. Significant changes will be notified via email or in-app.

14. Contact Us

For questions, complaints, or rights requests, contact:

Titan AI Store Builder Email: help@titanstorebuilder.com Address: Somerset, PA, United States

For GDPR, our Data Protection Officer is reachable at the above email. If unsatisfied, you can complain to your local data protection authority.

This Privacy Policy is governed by US laws, subject to applicable international regulations.