Privacy Policy

1. Who we are

Wrivo AI Description & Blog ("Wrivo AI", "we", "our") is a Shopify app that generates product descriptions, blog posts, email copy, and ad scripts using AI. The app is operated by the Wrivo AI team and can be contacted at supportwrivoai@gmail.com.

2. Data we collect

When you install Wrivo AI we collect and store:

• Shop domain — to identify your Shopify store.
• Shopify access token — stored securely to read/write your products, blog posts, and store policies on your behalf.
• Plan & billing information — your subscription tier, credit balance, and billing ID from Shopify.
• Brand Voice settings — any brand name, audience, keywords, or tone preferences you enter to customise AI output.
• Generated content — a history of AI-generated copy tied to your shop, used to power the History tab.
• Blog schedules — titles, keywords, and publishing preferences you configure for the Blog Scheduler.

We do not collect, store, or process personal data about your customers (buyers).

3. How we use your data

• To provide the AI generation features of the app.
• To track and manage your credit balance and subscription.
• To auto-publish blog posts and product descriptions to your Shopify store.
• To respond to support requests you submit via the in-app form.

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Third-party services

• Anthropic Claude API — product descriptions, blog posts, and all AI-generated content are produced by Anthropic's Claude model. Your product titles, descriptions, and brand settings are sent to Anthropic solely to generate copy. Anthropic's privacy policy applies: anthropic.com/privacy.
• Shopify — we integrate with the Shopify Admin API to read and write product and blog data on your behalf.
• Railway & Supabase/PostgreSQL — your data is stored in a PostgreSQL database hosted on Railway's infrastructure with encryption at rest.

5. Data retention & deletion

When you uninstall the app, your session data is deleted immediately. Under Shopify's GDPR requirements, all remaining merchant data (settings, credit history, generated content) is deleted within 48 hours of receiving the shop/redact webhook. You can also request early deletion by emailing supportwrivoai@gmail.com.

6. GDPR & your rights

Because we do not store personal data about your customers, the scope of GDPR obligations relating to end-customer data is limited. As a merchant (data controller) you retain full responsibility for your customers' data within Shopify. If you are a European merchant and have questions about your own data held by us, you may contact us at supportwrivoai@gmail.com to request access, correction, or deletion.

7. Security

All data is transmitted over HTTPS. Access tokens are stored encrypted. We validate Shopify webhook HMAC signatures on every inbound webhook. We do not log or store raw API keys.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email us at supportwrivoai@gmail.com.