Privacy Policy

1. Who We Are

FilterIQ ("we," "us," or "our") provides AI-powered product search, filtering, merchandising, and analytics services for Shopify stores. This Privacy Policy applies to all merchants and their shoppers who interact with our services, and people who contact us about FilterIQ. Our website is filteriq.app.

2. Data We Collect Through Shopify APIs

When you install FilterIQ, we access your Shopify store data through Shopify's authenticated APIs. Specifically:

• Product data: Titles, descriptions, prices, images, tags, variants, collections, and metafields. This data is used to build and maintain your search index in Meilisearch.
• Collection data: Collection titles, descriptions, and product memberships, used to configure collection-level filters and merchandising rules.
• Store information: Your myshopify domain, store name, and contact email for account management, billing, and support.

3. Data We Collect Directly

• Search analytics: Anonymized search queries, click events, filter usage, and zero-result queries from your store's shoppers. We do not collect personally identifiable information (PII) from shoppers. This data powers your analytics dashboard and helps us improve search relevance.
• Merchant preferences: Filter configurations, merchandising rules, synonym settings, and theme customizations you create within the FilterIQ admin dashboard.
• Dashboard usage: Page views and feature interactions within the FilterIQ admin, used to improve the product experience.

3a. Email Enquiries and Correspondence

When you email FilterIQ, we receive your email address, any name or store details you provide, your message and any attachments. We use this information to answer your enquiry and manage the related conversation. FilterIQ is responsible for deciding how this correspondence is used. Our legitimate interest is responding to requests about our service and providing support. Sending an enquiry does not subscribe you to marketing. Please do not send passwords, access tokens, payment-card details or customer records.

Cloudflare forwards messages sent to our FilterIQ email addresses. We use Google Gmail to receive, store and manage the conversation, and Resend to send replies from our FilterIQ address. These providers process message content and email-delivery information. This correspondence is handled separately from merchant and shopper data processed by the app infrastructure listed in Section 5.

Email data may be processed outside the UK or EEA, including in the United States. The linked provider information describes their transfer arrangements; see also Google's transfer frameworks. Resend stores email content and delivery logs in the United States; its sending region does not change that storage location. Contact privacy@filteriq.app with questions about these providers or applicable safeguards.

3b. Public Store Assessment

If you choose to assess a store before installing FilterIQ, we use the public storefront address you enter to check its homepage and identify clues in public page markup, such as a public theme name or search input. This does not prove a control is visible or working and does not access Shopify Admin data, sales, traffic or an exact product count. The request goes through filteriq-store-assessment.filteriq.workers.dev, a separate Cloudflare Worker. Cloudflare uses the visitor IP address and destination for abuse limits, and our website service processes the submitted address and public page briefly to return the result. Sanitised observations may stay in server memory for up to one minute to avoid repeated checks. FilterIQ does not save the address or downloaded page in an assessment database. You can skip the scan and enter your own answers instead.

4. How We Use Meilisearch to Index and Serve Search Results

Your product data is indexed in Meilisearch, an open-source search engine, to power fast and relevant search results on your storefront. Specifically:

• Each store gets a dedicated, isolated search index identified by your myshopify domain.
• Product data is synced to your index on install and kept up-to-date via Shopify webhooks (product/create, product/update, product/delete).
• Search queries from your shoppers are sent to Meilisearch to retrieve results. We apply typo tolerance, synonyms, and merchandising rules at query time.
• Uninstalling FilterIQ starts deletion of your search index. See Section 6 for the deletion process and retention exceptions.

5. Data Storage and Infrastructure

We use the following third-party infrastructure providers to operate FilterIQ:

The app infrastructure providers listed in the table are bound by data processing agreements. App data is encrypted in transit (TLS 1.3) and at rest (AES-256). AI subprocessors (Anthropic, OpenAI) receive only the catalog context required to generate a suggestion; we do not authorize them to use submitted merchant data to train public models.

6. Data Retention and Deletion

We retain subscriber account and store data while FilterIQ is installed to provide the service. Uninstalling FilterIQ starts deletion of that data. Shopify sends its shop/redact deletion request no earlier than 48 hours after uninstall. We complete the deletion within 30 days of receiving that request, unless applicable law requires retention. The 48-hour period is Shopify's request timing, not a promise that deletion is complete 48 hours after uninstall. See Shopify's privacy requirements.

• Product data: Retained in your search index while the app is installed, then deleted through the uninstall process described above.
• Search analytics: Individual storefront analytics events, such as each search, filter selection, product click or order, are kept for up to 365 days and then deleted automatically, normally within a day of that period ending. On uninstall, they are also subject to the deletion process above.
• Account information: Retained while FilterIQ is installed, then deleted through the uninstall process above. For account closure or a deletion request without uninstalling, contact privacy@filteriq.app.
• Redis cache: Ephemeral data with automatic TTL expiry (typically 1-24 hours), and cleared through the uninstall deletion process.

Required accounting records are retained for seven years and GDPR compliance event records for six years, with the shop domain pseudonymized. These limited retention exceptions do not keep your operational account, catalogue, or configuration active.

Email correspondence: Enquiry correspondence is separate from installed-app account and store data. We retain it while responding to your request and any related follow-up, and afterwards only where needed for ongoing support, an unresolved dispute or a legal obligation. You can request deletion at privacy@filteriq.app. Uninstalling FilterIQ does not automatically delete the email conversation. Provider-held delivery records and backups follow their own retention schedules, described in the information linked in Section 3a; they are not covered by the app uninstall deadline.

7. Shopify Compliance Webhooks

We implement all mandatory Shopify compliance webhooks:

• customers/data_request — When a merchant receives a data subject request from a customer, we respond with all data we hold related to that customer (if any). Since we do not collect shopper PII, this typically returns an empty dataset.
• customers/redact — When a merchant requests erasure of customer data, we delete any records associated with the specified customer identifier within 48 hours.
• shop/redact — Following uninstall, Shopify requests deletion of the store's search index, configurations, analytics, and account information. Section 6 sets out the timing and limited retention exceptions.

8. GDPR Rights (European Economic Area)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of all personal data we hold about you or your store.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data. Uninstalling the app starts deletion of installed-app account and store data as described in Section 6; email correspondence is handled separately.
• Right to data portability: Request your data in a structured, machine-readable format (JSON or CSV).
• Right to restrict processing: Request that we limit how we process your data while a complaint is being resolved.
• Right to object: Object to processing of your personal data that you believe is unnecessary for the service.

We respond to all GDPR requests within 30 days. Contact privacy@filteriq.app to exercise any of these rights.

9. CCPA Compliance (California)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You can request details about the categories of personal information we collect and how it is used.
• Right to delete: You can request deletion of your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• No sale of data: We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

10. How We Use Your Data

We use your data exclusively to provide and improve our services:

• Indexing your products in Meilisearch to power search and filter functionality
• Generating analytics reports about search and filter usage in your store
• Improving our AI configuration engine based on aggregate, anonymized patterns
• Sending account-related emails (billing, support, product updates)
• Providing customer support when you contact us

We never sell your data to third parties. We never use your product data to benefit competing stores. We never share individual store data without your explicit consent.

11. Cookies and Tracking

The FilterIQ admin dashboard uses essential cookies for session management and authentication. We do not use third-party tracking cookies or advertising pixels. The storefront search widget stores a session identifier in your shoppers' browser localStorage so that events fired during a single browsing session can be associated together. The session identifier expires after 30 minutes of inactivity or 24 hours, whichever comes first. We additionally store a single returning-visitor flag (one bit, no identity) so we can distinguish first-time from repeat shoppers in aggregate analytics — the flag carries no personal data and cannot be tied back to an individual. All of these writes only occur after the shopper grants consent via Shopify's Customer Privacy API, and are blocked entirely when the browser sends Global Privacy Control (GPC) or Do Not Track (DNT) signals. No personally identifying information is stored on the device.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@filteriq.app. We respond to all privacy requests within 30 days.

For general support inquiries, contact support@filteriq.app.