Effective Date: April 12, 2026 | Last Updated: April 12, 2026
1. Introduction
Althemax International Limited ("AlthemaxAI", "we", "us", or "our") operates the AlthemaxAI GEO application (the "App"), a Shopify embedded application that helps e-commerce merchants optimize their product data for AI commerce platforms. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.
2. Information We Collect
2.1 Store Information
When you install the App on your Shopify store, we collect:
- Shopify store domain (e.g., yourstore.myshopify.com)
- Store name and business information
- Shopify access token (used to read and write product data on your behalf)
2.2 Product Data
The App accesses your product catalog through the Shopify Admin API, including:
- Product titles, descriptions, images, and variants
- Pricing and inventory information
- Product identifiers (SKUs, GTINs, barcodes)
- Product metafields
2.3 Integration Credentials
If you choose to connect third-party services, we store:
- Stripe API keys (for ChatGPT / ACP product catalog integration)
2.4 Usage Data
We collect basic usage data such as which features you use, optimization actions performed, and subscription tier selections.
3. How We Use Your Information
We use the information we collect to:
- Sync and store your product data for AI readiness analysis
- Generate AI-optimized product descriptions using Amazon Bedrock (Claude AI)
- Create Schema.org structured data (JSON-LD) for your storefront
- Publish optimized descriptions and structured data back to your Shopify store
- Push product data to your Stripe catalog (if you have connected Stripe)
- Generate ACP and UCP feeds for AI commerce platform discovery
- Manage your subscription and billing through Shopify
- Provide customer support
4. Data Storage and Security
Your data is stored securely in AWS (Amazon Web Services) in the us-east-1 region using:
- Amazon DynamoDB — encrypted at rest for merchant, product, and audit data
- Amazon S3 — for generated product feeds
- AWS Lambda — serverless compute with no persistent storage
All data is transmitted over HTTPS/TLS. We do not store Shopify access tokens in plaintext logs. Third-party API keys (e.g., Stripe) are stored in our database and never exposed in the App UI beyond masked previews.
5. Data Sharing and Disclosure
We do not sell your personal or store data. We may share data only in these circumstances:
- Shopify — We read and write product data via the Shopify Admin API as authorized by your access token.
- Amazon Bedrock (AI) — Product titles and descriptions are sent to Amazon Bedrock's Claude AI model for optimization. Amazon Bedrock does not retain input data for model training.
- Stripe — If you connect your Stripe API key, we push product catalog data to your own Stripe account.
- AlthemaxAI Agent Marketplace — If you opt in via the Settings page, your optimized product data may be included in the AlthemaxAI Agent Marketplace feed for AI shopping agent discovery.
- Legal obligations — We may disclose information if required by law, regulation, or legal process.
6. Shopify API Scopes
The App requests the following Shopify API permissions:
- read_products — To sync your product catalog
- write_products — To publish optimized descriptions, metafields, and Schema.org markup back to your products
We only access data necessary for the App's functionality. We do not access customer data, orders, or financial information beyond what is listed above.
7. Data Retention
We retain your data for as long as the App is installed on your Shopify store. Upon uninstallation:
- Your Shopify access token is immediately invalidated
- Product data and audit records are retained for 30 days to allow for re-installation, then permanently deleted
- Third-party API keys are deleted immediately upon uninstallation
You may request immediate deletion of all your data at any time by contacting us.
8. Your Rights
You have the right to:
- Access — Request a copy of the data we hold about your store
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your data
- Portability — Request your data in a machine-readable format
- Withdraw consent — Uninstall the App at any time to revoke access
To exercise these rights, contact us at enquiry@althemaxai.com.
9. Cookies and Tracking
The App does not use cookies or third-party tracking scripts. The App operates entirely within the Shopify Admin embedded environment and does not track browsing activity.
10. Children's Privacy
The App is a business-to-business service intended for Shopify store owners. We do not knowingly collect data from individuals under the age of 18.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Althemax International Limited
Email: enquiry@althemaxai.com
App: AlthemaxAI GEO