1. Introduction
ShopSafeAI LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://shopsafeai.com and our Chrome browser extension (collectively, the "Service").
2. Information We Collect
2.1 Account Information
- Email address (used for account authentication)
- Account type (Free or Pro subscription status)
- Subscription and payment information (processed securely by Stripe - we do not store card details)
2.2 Usage Data
- Product titles and descriptions you submit for compliance checking
- Compliance check results and violation risk levels
- Number of checks performed and features accessed
- Browser type, device information, and IP address
- Extension interaction data (buttons clicked, features used)
- Screenshots of violation notices uploaded to Appeal Writer (processed and deleted after 24 hours)
- Shop performance metrics you submit for health analysis
- Policy questions asked to the Q&A assistant
2.3 Technical Data
- Session tokens and authentication credentials (encrypted)
- Extension version and browser version
- Error logs and performance metrics
3. How We Use Your Information
- Provide Service: Analyze your product listings for TikTok Shop compliance violations using AI
- Screenshot Analysis: Process uploaded violation screenshots using OpenAI Vision API to extract violation details and auto-generate appeal letters
- Shop Performance: Analyze shop metrics to provide compliance risk assessments and improvement recommendations
- Policy Assistance: Answer TikTok Shop policy questions using AI to help you maintain compliance
- Account Management: Process subscriptions, manage usage limits, and handle billing
- Improve Service: Train AI models to better detect violations and improve accuracy
- Customer Support: Respond to inquiries and resolve technical issues
- Legal Compliance: Comply with legal obligations and enforce our Terms of Service
4. Third-Party Services
We use the following third-party services to operate ShopSafe AI:
- Supabase: Database and authentication (data stored in US data centers)
- OpenAI: AI analysis of product listings, screenshot processing with Vision API, and appeal letter generation (data processed per OpenAI's privacy policy)
- Stripe: Payment processing (PCI-compliant, we do not store credit card numbers)
- Vercel: Web hosting and infrastructure (data stored in US data centers)
Each service has its own privacy policy governing their data handling practices.
5. Data Retention
- Account Data: Retained while your account is active and for 90 days after deletion
- Listing Checks: Stored for 12 months for AI model improvement, then anonymized
- Screenshots: Processed immediately and deleted after 24 hours (not stored long-term)
- Appeal Letters: Stored for 30 days then deleted (you receive a copy immediately)
- Shop Metrics: Stored for 90 days for trend analysis and comparison
- Usage Logs: Retained for 90 days for analytics and troubleshooting
- Financial Records: Retained for 7 years for tax compliance
6. Data Security
We implement industry-standard security measures:
- End-to-end encryption for data in transit (HTTPS/TLS)
- Encrypted database storage via Supabase
- Secure authentication using JWT tokens
- Regular security audits and updates
- Restricted access to user data (only authorized personnel)
7. Your Privacy Rights
7.1 GDPR Rights (EU Users)
If you are in the European Economic Area, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Objection: Object to data processing for direct marketing
7.2 CCPA Rights (California Users)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete your personal information
- Opt-out of sale of personal information (we do not sell data)
- Non-discrimination for exercising your privacy rights
7.3 How to Exercise Rights
To exercise any of these rights, email us at admin@shopsafeai.com with "Privacy Request" in the subject line. We will respond within 30 days.
8. Cookies and Tracking
We use the following types of cookies:
- Essential Cookies: Required for authentication and core functionality (cannot be disabled)
- Analytics Cookies: Track usage patterns to improve the service
Our Chrome extension stores authentication tokens locally in your browser for login persistence.
9. What We Do NOT Do
- We do NOT sell your data to third parties
- We do NOT share your product listings publicly or with competitors
- We do NOT track you across other websites outside our service
- We do NOT use your data for targeted advertising
10. Children's Privacy
ShopSafe AI is not intended for users under 18 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.
11. International Data Transfers
Your data may be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to this transfer. We ensure adequate safeguards are in place for international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our website. Continued use of the Service after changes constitutes acceptance.
Last Updated: January 15, 2025