Privacy Policy

Writehand AI Writer helps Shopify merchants generate and publish blog articles. This policy explains what information we collect, how we use it, and how merchants can contact us about privacy requests.

When a merchant installs or uses the app, we collect and process:

• Shop information such as shop domain, shop name, owner email, installation status, and app scopes.
• Encrypted Shopify access tokens needed to operate the app on the merchant's behalf.
• Article generation inputs, generated article content, job status, cover image URLs, and publish history.
• Credit wallet activity, billing attempt metadata, Shopify purchase identifiers, and transaction audit records.
• Account/session information for the optional writehand.net bridge and operational logs used for security and support.

The app is designed for Shopify blog content and does not request protected customer data scopes.

We use merchant information to:

• Authenticate the app, maintain sessions, and keep the Shopify embedded experience working.
• Generate requested blog articles and publish them to the selected Shopify blog.
• Reserve, finalize, refund, and display article credits.
• Process one-time credit pack purchases through Shopify Billing.
• Detect failures, support merchants, troubleshoot issues, prevent abuse, and improve reliability.

We use infrastructure and processing providers to operate the app, including hosting, database, file storage, analytics, automation, and AI content generation providers. These providers process data only as needed to deliver the app's functionality, maintain security, or comply with legal obligations.

We subscribe to Shopify compliance webhooks for customer data requests, customer redaction, and shop redaction. When a store uninstalls the app, we mark the store inactive and preserve operational records only as needed for accounting, support, fraud prevention, or legal compliance. Shop redaction requests are handled according to Shopify's required timelines.

Shopify access tokens are encrypted at rest. Data is transmitted over HTTPS. Access to production systems is limited to authorized operators who need it to run and support the service.

We retain merchant account, billing, and job records for as long as needed to provide the app, resolve disputes, maintain audit trails, and comply with legal obligations. Merchants can request deletion of eligible data using the contact details below.

Merchants can uninstall the app from Shopify at any time. Merchants can also contact us to request access, correction, or deletion of eligible information associated with their store.

For privacy questions or requests, contact us at support@writehand.net.