Privacy Policy

Introduction

Data We Collect

When you install and use FoundGPT, we access the following data from your Shopify store:

• Store information — shop name, domain, and primary locale.
• Product data — titles, descriptions, handles, images, prices, variants, and availability status.
• Collection data — titles, descriptions, handles, and associated product IDs.
• Page & blog content — titles, body content, and handles of pages and blog articles.
• Navigation menus — menu structure and links.
• Legal policies — publicly available store policies (privacy, refund, terms of service, shipping).

We do not collect:

• Customer personal data (names, emails, addresses, payment info)
• Order or transaction data
• Staff account credentials
• Analytics or tracking data about store visitors

How We Use Your Data

All data accessed is used solely to:

1. Generate and update your store's llms.txt file — a structured text file that helps AI assistants understand your products and content.
2. Run a content audit to identify missing or incomplete product information (e.g., missing descriptions, images, or SEO metadata).
3. Display a dashboard showing your AI-readiness score and content statistics.

We do not sell, share, or transfer your data to any third parties. Your data is not used for advertising, profiling, or any purpose other than the core functionality described above.

Data Storage & Security

We store minimal metadata (shop domain, installation status, and generated file references) in a secure database hosted on Fly.io. Product and content data is processed in real time and is not permanently stored beyond what is needed to render your llms.txt file.

All data is transmitted over HTTPS. Our infrastructure is hosted in SOC 2-compliant data centers.

Data Retention & Deletion

When you uninstall FoundGPT, we automatically delete all data associated with your store within 48 hours. This includes any stored metadata and generated files.

You may also request data deletion at any time by contacting us at the email below.

GDPR & CCPA Compliance

FoundGPT is designed with privacy by default:

• We process only publicly available store content — no personal customer data is collected or processed.
• We respond to Shopify's mandatory compliance webhooks for customer data requests, customer data erasure, and shop data erasure.
• EU merchants: You have the right to access, rectify, or erase your data under GDPR. Contact us to exercise these rights.
• California merchants: Under the CCPA, you have the right to know what data we collect and to request its deletion.

Shopify API Scopes

FoundGPT requests only the following read/write permissions:

• read_products — to read product data for llms.txt generation
• read_content — to read pages and blog articles
• write_content — to publish the generated llms.txt file as a store page
• read_legal_policies — to include store policies in the llms.txt
• write_online_store_navigation — to optionally add llms.txt link to navigation

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

Email: support@foundgpt.app