Privacy Policy
Effective 2026-11-05
FeedMedic is a Shopify app that audits product catalogs for ChatGPT Ads eligibility. This policy explains what we collect, why, and how we protect it.
What we collect
- Store information: your Shopify store domain and shop name.
- Access token: a Shopify API token used to read your catalog. It is encrypted at rest with AES-256-GCM.
- Product data: products, variants, prices, product availability, images, barcodes, and product descriptions. The app reads this data only to run the audit and generate your report.
- Plan status: your current FeedMedic plan and billing status.
What we do not collect
- No customer names, emails, phone numbers, addresses, or order data.
- No payment card data. Shopify handles billing.
- No storefront customer behavior or analytics.
How we use it
- Run the catalog audit and produce per-item fixes.
- Show your report and CSV export.
- Provide support and enforce plan limits.
Retention
- The access token is kept until you uninstall the app or revoke access.
- Audit results are cached in memory for up to 10 minutes; they are not retained as a permanent catalog copy.
- When you uninstall, our uninstall webhook deletes the stored session and token.
Sharing
We do not sell data. We share data only with Shopify (to operate the app) and our hosting provider (to run the service). We do not send catalog data to OpenAI; the audit compares your data against the public OpenAI Commerce schema locally.
Security
Access tokens are encrypted at rest, the app uses read-only Shopify scopes, and all traffic is served over HTTPS. If you believe a credential is compromised, uninstall the app and contact us.
Your rights
You can request access to or deletion of your store data at hello@feedmedic.app. Uninstalling the app deletes the stored session. For customer data requests, we do not store customer data.