ColliomPro collects data needed to authenticate your store, run AI-assisted collection generation, and manage app billing.

Merchant and staff account data

• Your Shopify store domain and OAuth access token for authentication and API access
• Shopify session details provided during install (for example scope, session identifiers, and, when supplied by Shopify, staff user id, name, email, and locale)
• Internal shop record we create to associate analysis runs and billing with your store

Catalog and collection-generation data

• Product information we read from Shopify (for example titles, types, tags, variants, and identifiers) to send a structured summary to the AI model
• Analysis session records: prompts and parameters for each run, raw model output (where applicable), validated collection proposals, rule payloads, suggested product references, status, timestamps, and error details
• Counts and outcomes when collections are created or updated in Shopify

Billing data

• Subscription or one-time purchase identifiers and plan state returned by Shopify’s billing APIs

We do not operate a storefront signup form inside ColliomPro for your buyers. The core app does not collect or store your customers’ email addresses or marketing preferences for collection generation.

We use the data we collect only to operate ColliomPro:

• Authenticate requests between Shopify and our servers
• Fetch product catalog data you choose to analyze
• Send catalog summaries to the configured AI provider and parse structured collection suggestions
• Create or update smart collections and related data in your store when you confirm or apply results
• Store run history, diagnostics, and metrics so you can review past generations
• Enforce plan limits and billing through Shopify
• Respond to mandatory compliance webhooks from Shopify

We do not sell, rent, share, or trade merchant data with third parties for advertising or unrelated commercial purposes.

When you start an analysis, a subset of your product catalog is sent to an AI provider (for example OpenAI, Groq, or OpenRouter, depending on our server configuration) over encrypted connections. The provider processes that content to return collection groupings and metadata. We store the model output and parsed structure in our database so you can audit results and retry or apply changes. The AI provider’s own privacy policy and data-processing terms apply to that processing step.

What we minimize

We send the minimum product fields needed for merchandising suggestions. We do not ask the AI to store your data for its own training on our behalf; retention and subprocessors are governed by the provider you configure and their terms.

Application data is stored in a database on our hosting infrastructure (for example a managed app database or volume attached to our servers). We implement reasonable technical and organizational measures, including:

• HTTPS/TLS for traffic between merchants, Shopify, and our application
• OAuth and access tokens managed according to Shopify’s app requirements
• Secrets and API keys held in environment configuration, not in client-side code
• Database access limited to our application services

Payment card data is not processed by ColliomPro; charges you approve are handled by Shopify’s billing system.

We retain merchant and analysis data while ColliomPro is installed and you use the service, so you can view history and reapply results.

When Shopify sends a shop/redact webhook after you uninstall the app, we delete OAuth sessions and the shop record from our database; related analysis sessions, generated collection rows, and billing rows are removed with that shop (cascade delete).

You may request clarification or deletion assistance at any time by contacting [email protected]

ColliomPro is built to meet Shopify’s mandatory privacy requirements for public apps. We subscribe to Shopify’s compliance webhooks:

• customers/data_request — acknowledged per Shopify’s process; the app is not designed to hold storefront customer purchase histories beyond what Shopify sends in the webhook payload
• customers/redact — acknowledged per Shopify’s process
• shop/redact — we delete shop-associated data stored by the app as described in Section 05

Where the GDPR applies, you remain the controller of your end-customers’ personal data in your store; ColliomPro processes store and staff data you authorize to deliver the service. End-customers who do not interact with ColliomPro directly should contact you as the merchant for privacy requests relating to your store.

ColliomPro relies on:

• Shopify — authentication, Admin API (products, collections, metaobjects, billing as permitted by your install)
• AI / LLM provider — chat completions used to propose collections from catalog summaries
• Hosting provider — servers and database storage for the application

Each provider processes data according to its own terms. We only transmit what is needed for those integrations.

ColliomPro does not inject tracking or analytics cookies on your customers’ storefront. When you open the embedded app inside Shopify Admin, session and security cookies are controlled by Shopify as described in Shopify’s documentation and privacy policy.

As a merchant, you control how you use ColliomPro:

• Uninstall the app from Shopify to stop data collection and trigger shop data deletion via Shopify’s compliance flow
• Revoke or adjust app permissions by reinstalling or updating scopes as Shopify allows
• Contact us for questions about stored analysis or billing records

For data subject requests that relate solely to our role as a processor, we will assist as required by law and Shopify’s agreements.

We may update this privacy policy to reflect changes in features, subprocessors, or legal requirements. The “Last updated” date at the top will change when we do. Continued use of the app after updates means you accept the revised policy where permitted by law. Material changes may be communicated through the app, Shopify, or email when appropriate.

If you have questions about this policy or how we handle data, contact:

Apps Alchemy
[email protected]

We aim to respond to privacy inquiries promptly.