StoreFixer by Vector privacy policy

Who is responsible

Controller: Sergi Hernández Molina. Address: C/ La Gleva 32, 08570 Torelló (Barcelona), Spain.

Contact for any privacy matter: support@byvector.io.

What the app is allowed to do in your store

Only what a feature that already exists uses:

• Products (read and write): to check your listings and fix Google snippets, tags, titles and selling of sold-out variants, and to put the lighter copy of a photo that weighs too much on the listing. If you ask for it in the Chat (Pro and Max plans), Vector also creates a new simple product, always as a draft so your customers don't see it until you publish it; you can undo it, and it is deleted if it is still exactly as Vector created it.
• Files (read and write): to describe your product photos (alt text) and to upload the lighter copy of a heavy photo. The original photo stays in your Files so you can go back to it.
• Inventory (read and write): to see which variants are sold out but still on sale and, if your plan includes it, balance negative or unbalanced stock between locations (always undoable). If you ask for it in the Chat (Pro and Max plans), Vector sets the units of a product you tell it, only after your click, and you can undo it.
• Legal policies (read and write): to tell you if one is missing (refund, privacy, terms, shipping, contact and, in the European Union, the legal notice) and, if your plan includes it, prepare a draft for you. Vector never publishes a policy on its own: only the draft you approve is written, and you can undo it.
• Publications (read and write): to tell you if an active product isn’t visible in your online store and, if your plan includes it, propose publishing it. Vector never publishes it on its own (you may sell it only in your physical shop): only when you approve it, and you can undo it.
• Languages and translations (read and write): to tell you about missing or outdated translations and, on the Pro and Max plans, to translate what is missing in the titles, descriptions and Google texts of your products, collections and pages. Vector only translates what is not translated, never touches what you translated or edited yourself, in Settings you can ask it to propose it first, and you can always undo it. On the Max plan, if you ask for it in the Chat, Vector adds a new language to your store, which your customers don't see until you publish it with one click, and translates the whole store into it: products, collections, pages, menus, the theme's texts and the ones you wrote in other apps' blocks inside the theme, shipping names, product options and photo descriptions. It doesn't translate the legal policies.
• Pages (read and write): to tell you about empty pages, placeholder text, or pages that are unpublished but linked from a menu and, if your plan includes it, give them their Google text in their own words or hide an empty page until you write it. Vector only writes a page's content, or creates a new page as a draft, when you ask for it in the Chat, and you can undo it.
• Store menus and redirects (read and write): to tell you about menu links that lead to something deleted or unpublished, or that are empty. Vector creates redirects, when you delete or rename a product or a collection, from its old address to the one that replaces it. It only changes a menu (adding, removing or renaming a link) when you ask for it in the Chat (Pro and Max plans). Everything can be undone.
• Discounts (read and write): only for what you ask for in the Chat (Pro and Max plans): creating a discount code with the percentage you say, or turning one off, always after your click and with its undo. Vector never creates or changes a discount on its own.
• Orders (read only): to show you the revenue attributed to Vector, that is, the sales of products Vector fixed, counted from the fix. From each order Vector reads only its lines (which product, how many units and what was paid for it), the date and whether it is a test or cancelled order. It never reads the buyer's name, email, phone or address, and it never changes an order. Shopify only lets apps read orders from the last 60 days.
• Theme (read only): to know when you change or publish a theme and tell you, because that is where links and buttons tend to break, and to tell you about code left in your theme by apps you removed, and where it is. Vector never touches theme code.
• Shipping (read only): to know which countries you ship to and tell you about those with no shipping rate. Vector never changes your rates.
• Markets (read and write): to tell you about countries you ship to where nobody can buy because they are in no active market and, if your plan includes it, open sales there with a market of Vector's own, or propose activating a market left as a draft. Undo removes only the markets Vector created; yours are never deleted.
• Shopify Payments payouts and disputes (read only): to tell you when a payout doesn't reach your bank or a dispute needs your answer before its deadline. For that, Shopify also asks to read the basic details of your Shopify Payments account. Vector reads only the amount, the status and the date: never your bank account, and it never answers or changes anything.
• Locations (read and write): to know whether a location fulfils online store orders when a product shows sold out while it has units there. Vector explains it to you and, only if you click the button, turns on online orders for that location; undo puts it back as it was. It never does it on its own.
• Product category details (write): Google asks for the colour and size of clothing, and Shopify keeps them as entries of the product's category. Vector proposes the entry from your variants' options and writes it only if you click the button; undo removes what Vector added. It never does it on its own.
• Vector also visits your public storefront the way any visitor would, to find links, images or pages that don't work. That needs no permission.

What data we do NOT touch

StoreFixer does not ask for access to your customers, and from orders it only reads the product lines, the date and the amount, so it never receives or stores your buyers' data (names, emails, phones, addresses, payments). It stores nothing from orders except the total sales of each day. Nor does it store data about the people on your team who open the app.

What we store and why

• Your store and its access: the .myshopify.com domain and the permission (token) Shopify gives the app. The token is stored encrypted (AES-256); the key to open it is kept outside the database.
• Your settings: language, how much freedom you give Vector, whether the guard is on, your plan, and the last check (store name and, for each product, its id, title, handle and main photo).
• What Vector finds: each problem detected, with the value before and what it proposes.
• The password that protects your store while it is in private mode (the one in Online Store › Preferences, never your Shopify account password), only if you enter it in Settings: Vector uses it solely to see your store the way a shopper would. It gives no access to your Shopify admin, orders, customers or money. It is stored encrypted (AES-256), with the key kept outside the database, and is never shown again. You can delete it in Settings at any time, and it is deleted automatically when you open your store to the public or uninstall the app.
• What Vector changes: the history of every change with its before and after, to show it to you and to undo it.
• What Vector remembers about your store: the addresses of your products and collections it has seen (to notice when one is deleted or changes address) and the measured sharpness of your photos (so the same one is not measured twice), and the total revenue attributed to Vector for each day (one amount per day, with no data about the order or the buyer), so the figure is not lost when an order is older than the 60 days Shopify lets apps read.
• Your support requests: what you write and your store's contact email, so we can answer. When you write to us you get a confirmation email, and the answer arrives at that same address. Your request, and anything you write to support@byvector.io, is kept in Vector's support inbox (on Cloudflare) so we can answer you and fix what you tell us.
• The weekly summary: if it is on in Settings, every Monday Vector sends a summary of its work to your store's contact email. You turn it off in Settings or with the link in the email itself. Of each send we only keep when it happened.
• Vector's work on your store: how many requests and checks each review makes and how long they take, so the service never costs more than you pay. Only numbers, no data about your customers.
• Your plan: the subscription you approve in Shopify (its id and status) and what you used this month (fixes, rewrites, languages), to apply your plan's limits. Shopify does the billing: we never see your card.
• If you came through a partner's link: which partner brought you and your payments to the app, to pay their commission.
• Internal figures without your domain: when the app is installed or opened, whether the guard is on and the plan. They are stored under an encrypted key that does not reveal which store they belong to. And a daily count per kind of problem (how many are detected, fixed, undone or rejected) with no store key at all, so Vector learns what breaks and which fixes work.

How long we keep it

While the app is installed. When you uninstall it, Shopify tells us and we immediately delete everything about your store: access, settings, problems found, history, support requests, the record of Vector's work, the guard's memory and your plan's data. If Shopify later asks us to erase your store's data, we do it again.

What stays: the internal figures without your domain (they cannot tell they were yours). If you came through a partner, the link with that partner keeps your domain until Shopify asks us to erase your store's data; then it is erased and only an anonymous line remains to balance commissions already paid.

The fixes Vector made stay in your store: they are yours. StoreFixer adds no code to your theme, so nothing of ours is left there when you uninstall.

Outside services involved

These services may process data outside the European Economic Area under their own terms.

• Shopify: your store's platform. The app reads and writes there with the permissions above.
• Cloudflare: the server where the app runs and its database is kept.
• Resend: the service that sends the app's emails (the weekly summary and the answers to your requests). It receives your store's contact email and the text of each email.
• Google Fonts: the app's screens load the Inter typeface from Google, which receives the IP address of the browser opening them.
• Our public page counts visits with no third-party cookies and without storing the IP: only the day, the page, the referring site, the campaign (utm) and the country. If you arrive through a partner's link, we set our own cookie (sf_af, 60 days) to remember who brought you.
• Artificial intelligence: DeepInfra and, if it does not answer, Groq or Cloudflare Workers AI (all with Vector's account, not yours). For proposals, it is only used on plans that include them and only if in Settings you choose “Fix what’s safe and propose the rest”. To prepare a proposal it receives only that product's text: its title, its description (without the supplier's filler text) and its Google title. Never customer or order data. Outside the chat, what the AI writes is a proposal: it does not reach your store until you approve it. On the paid plans (Basic, Pro and Max) you can talk to Vector in the Chat tab, with what your plan includes. To answer you and do what you ask, the AI receives what you write and the last messages of that conversation, the open points in your store and the details of your products, collections and pages it needs (titles, texts, Google texts, prices, stock, tags, type and vendor). Never customer or order data. The conversation is kept only in your browser. When you give a clear instruction, Vector makes the change, checks it in your store and you can undo it in Activity; prices, publishing or unpublishing and bulk changes always wait for your confirmation.

How we protect the data

• Access to your store is encrypted in the database.
• Notifications from Shopify are checked against their signature before anything is done.
• Each store's data is kept apart: no row is ever shared between stores.

Your rights

You can ask us to see, correct or delete your data, or object to its use, by writing to support@byvector.io. The fastest way to delete everything is to uninstall the app. If you think we have not handled your data properly, you can complain to the data protection authority of your country.

Changes to this policy

If what the app does with data changes, we change this text and its review date before the change applies.