Privacy Policy

Last updated: 14 Nov 2026

What we collect

• Account data: your name, email address, chosen language and an encrypted (hashed) password.
• Catalog data (CatalogDoctor AI): from stores you connect, titles, descriptions, SKUs, prices, image links, attributes, variations and categories of published products.
• Sales data (SalesDigest AI): daily totals (orders, revenue, refunds, discounts, shipping, tax, items sold) and products sold. Never customer names, emails, addresses or payment details.
• Site content and chat (SiteChat AI): the text of published pages, posts and products; visitor questions and answers, with the page address without parameters; the name and email a visitor enters before chatting, used only to answer them (also by email) and deleted automatically with the conversation. The site owner is the controller of this data; we process it on their behalf.
• Billing data: your plan and subscription status. Payments are processed by Stripe (or the payment provider of our online shop); card details are handled only by them and never reach our servers. We receive your name, email and subscription status from Stripe.
• Technical data: IP address and basic logs, used for security and rate limiting.

How we use it

To provide the Service (scans, AI suggestions, sales reports, chat assistant), to manage your account and subscription, to keep the Service secure, and to contact you about your account.

AI processing

When you request a suggestion or a report, or a visitor uses the chat, the data needed is sent to our AI provider (Anthropic or OpenAI) to generate the text. These providers process the data on our behalf and do not use it to train their models under their API terms.

Sharing

We do not sell your data. We share it only with service providers needed to run OMNIXA: our hosting provider, our AI provider, and our payment provider Stripe (or those of our online shop).

Retention and your rights

We keep the three most recent scans per store. When you remove a site, its data is deleted; when you close your account, your data is deleted within 30 days. You can ask to access, correct or delete your data, or object to its processing, by contacting the contact details on our website. If you are in the EU or UK, you can also complain to your data protection authority.

Security

Connections use HTTPS, each site connection uses its own signing key, and secrets are encrypted at rest.