Shopix ("we", "us", "our") provides visual search technology for Shopify stores. This Privacy Policy describes how we collect, use, and share information when merchants install our app ("the App") and when shoppers use visual search on a merchant's store.
This policy also covers Shopix Swatches, listed in the Shopify App Store as "Shopix Swatch & Variant Images". It reads, changes and keeps different data from our visual search apps, so it has its own section: Shopix Swatches. The sections on sharing (including our service providers), support requests, security, your rights, changes and contact apply to it as well.
Information We Collect from Merchants
When you install the App, we access information from your Shopify store via the Shopify API, including:
- Store information: the store's name, Shopify address and main domain, store email and contact email, the owner's name, time zone, currency and Shopify plan. Shopix Image Search and Visually Similar also keep the store's phone number and billing address.
- Product catalog: product titles, descriptions, images, variants, and pricing, used to build and keep your visual search index in sync.
Information We Collect from Shoppers
- Images uploaded by shoppers to perform a visual search. These are processed to find matching products and are not used for any other purpose.
- Counts of how shoppers use our widgets (searches, results shown and clicks), with no information that identifies a shopper. See Storefront usage counts.
We do not knowingly collect personal information from children, and we do not sell personal information.
Storefront usage counts
To run the apps, to show each merchant how their store uses them, and to apply plan limits, Shopix counts how shoppers use our widgets on a merchant's store. This counting is part of the service and is on for every store that has our apps installed. A merchant who doesn't want it can uninstall the app.
What we count. Each count records only:
- which of our apps it came from, and the store's Shopify address (for example, example.myshopify.com);
- what happened: a visual search was completed, a "similar products" carousel was shown, or a result was clicked;
- for a search: how many results it returned and how long our server took;
- for a carousel: the Shopify ID of the product page it was shown on and how many products it showed;
- for a click: the Shopify ID of the clicked product and its position in the results;
- the hour it happened (UTC), set by our server. We do not keep the exact time.
What we never store with these counts: shoppers' IP addresses, cookies (we set none and read none), device identifiers or fingerprints, the browser's user agent, a shopper's name, email or customer account ID, and the photos shoppers upload. A photo is used to run the search and is never stored. None of these counts can identify a shopper, and we do not combine them with other data to do so.
What we use only briefly, in memory: when a shopper runs a visual search or views similar products, our server sees the network (IP) address that the request came through. We use it only to limit abuse (too many requests in one minute). It is kept in our server's memory for about a minute and at most 75 seconds after the last request, and is never written to a log, file or database. We check the browser's user agent in the same way, only to skip known search-engine crawlers.
How we use them. We use the counts to operate and secure the service, to show the merchant their own store's usage in the app, to apply plan limits (for example, a monthly search allowance), and to understand how our apps are used overall. We do not use them for advertising, we do not sell them, and we do not show one merchant another merchant's numbers. We do not use a merchant's data to train or improve our models unless that merchant has agreed to it.
How long we keep them. Individual counts are deleted before they are 30 days old. Daily totals per store (searches, searches with results, carousels shown, clicks) are kept while the app is installed. They are deleted together with the rest of the store's data when Shopify asks us to delete it, 48 hours after the app is uninstalled.
The merchant's own analytics. Separately, the Shopix Image Search widget can add its events to the store's own Google Tag Manager data layer, so that the merchant can see them in their own analytics. It is on by default for stores that install the app from October 2026, and the merchant can switch it off in the app under Integrations. Shopix does not receive that data. The merchant's own analytics and consent settings govern it.
Shopix Swatches
Shopix Swatches sorts a store's product photos by color, so that a shopper who picks a color sees that color's photos and a matching color swatch. It works only with the merchant's store and product catalog. It does not receive or store any information about shoppers or the store's customers.
What Swatches reads. Through the Shopify API, with the permissions the merchant grants at install, Swatches reads:
- store information: the store's name, Shopify address and main domain, store email and contact email, the owner's name, time zone, currency and Shopify plan;
- products, including drafts: titles, product types and categories, options and their values (for example, Color: Sage), variants, the photos, videos and 3D models of each product and variant, and any color swatches the store already has;
- the store's color swatch entries (Shopify metaobjects);
- the settings of the store's live theme, read only, to tell the merchant whether the Swatches app embed is on and whether the theme shows color swatches. Swatches never changes the theme.
What Swatches changes in the store. Nothing changes until the merchant clicks Apply. Then Swatches adds photos to variants, saves on each product a map of which photo belongs to which color (a metafield), creates color swatch entries, sets the product's category if the merchant confirms one, and links the color option to the swatch entries. Before each change we record what was there, so that the merchant can undo it from the app. A field that has been changed in Shopify since our change is left as it is. Some data Shopify creates when we apply changes, such as the store-wide color definition, stays after Undo. These changes are part of the store's own data: they stay in the store if the app is uninstalled. A merchant who wants the store back as it was should use "Undo all changes" before uninstalling. Once we have deleted our records (see below), we can no longer undo them.
How Swatches uses AI. To sort photos by color, Swatches sends each product's photos, together with the product's title, the name of its color option and the names of its colors, to AI models on Amazon Bedrock, the AI service of Amazon Web Services (AWS), in the EU (Ireland). The models are Amazon Titan, which compares photos, and Qwen3 VL, which looks at the photos and the color names. Both run on AWS's own infrastructure; the companies that made them do not receive the data. Under AWS's terms for Amazon Bedrock, the inputs and outputs are not used to train any model and are not shared with model providers. We do not use a merchant's photos or catalog to train or improve any model unless that merchant has agreed to it.
Product photos can show people, such as models wearing the product. Swatches uses these photos only to tell colors apart and does not identify anyone in them.
We do not keep copies of the photos: they are fetched from Shopify and processed in memory. We keep each photo's Shopify address and alt text, a numerical description of it (an image embedding and its main colors), and the models' answers, so that an unchanged product doesn't have to be sent to the models again. We also keep a record of the cost of each AI request, to apply each plan's AI limit.
On the storefront. The Swatches app embed only shows or hides product photos when a shopper picks a color. It runs in the shopper's browser, sends nothing to Shopix or anyone else, and sets no cookies. Swatches does not count shoppers' activity and is not part of the Storefront usage counts described above.
The theme check. When the merchant clicks "Check on my store", the merchant's own browser opens one of their products with a one-time link that expires after 15 minutes. A script taps each color, checks which photos are shown and that the right variant is selected, and never adds anything to the cart. While it runs, it keeps a reload counter in that browser tab's session storage. It sends the result to Shopix through the store's own address (Shopify's app proxy): for each color, whether it passed, how many photos were expected and shown, whether the screen was desktop or mobile size, and a short technical note. It takes no screenshots, and we do not record the browser's IP address or user agent.
Support, alerts and diagnostics. Support requests sent from Swatches are kept as described in Support requests. Like our other apps, Swatches sends short operational alerts to our team through Telegram (for example: installed, scan finished, a change failed, a support request arrived), as described in Service providers. "Copy diagnostics" in the app copies technical details (theme, plan, counts, versions) with no names, email addresses or web addresses. It reaches us only if the merchant pastes it into a message.
How long Swatches keeps data. While the app is installed, we keep what it needs to work: the catalog information described above, the AI results, the merchant's review decisions, the record of every change (for Undo), theme check results and AI cost records. Finished scans are deleted after 30 days, except the most recent one. When the app is uninstalled, we delete our access to the store at once and keep the rest for 48 hours, so that a quick reinstall can still undo changes. When Shopify then asks us to delete the store's data, we delete all of the store's Swatches data. We also remove the store's contact details (name, email addresses and the owner's name) unless another Shopix app is still installed on the store. We keep a basic record of the install (the store's Shopify address and main domain, time zone, currency, Shopify plan, and the install and uninstall dates). Support requests are kept as described in Support requests.
How We Use Information
- To provide, operate, and maintain the visual search service.
- To synchronize and index the merchant's product catalog.
- To provide merchants with usage analytics.
- To support our customers.
- For Shopix Swatches: to sort a merchant's product photos by color and to make, record and undo the changes the merchant approves.
Analytics on this website
On shopixai.com and on our demo store demo.shopixai.com (our own sites only, not on merchants' stores) we use Google Analytics, loaded through Google Tag Manager, to understand how visitors find Shopix, which links they follow to the Shopify App Store and whether the demo store's photo search returns results. The demo store sends no photos to Google Analytics, only that a search happened and whether it found products. Visitors in the EEA, the UK and Switzerland are asked first: analytics cookies are set only if you click "Accept", and you can change your choice by clearing the site's data in your browser. Elsewhere, analytics is on by default. We do not use this data for advertising.
The Shopify App Store listing for our apps sends listing visits and installs to the same Google Analytics property through Shopify's listing integration.
Sharing
We do not sell or rent personal information. We share information only with service providers that host and operate our infrastructure (such as cloud hosting providers), and when required by law.
Service providers. For every Shopix app, these are:
- Amazon Web Services (AWS): hosting, database and AI processing, in the EU (Ireland). The AI models we use on Amazon Bedrock, including Amazon Titan and Qwen3 VL, are run by AWS.
- Telegram: short operational alerts to the Shopix team (for example: an app was installed or uninstalled, an import, scan or change failed, a support request arrived). An alert contains the store's Shopify address and sometimes the store's name and Shopify plan. A support alert also contains the start of the request, with email addresses and phone numbers removed.
Telegram may process data outside the EU; we limit alerts to what we need to operate the apps.
Data Retention
We retain merchant data for as long as the App is installed. When you uninstall the App, we delete your store's data, including the product index, in accordance with Shopify's mandatory data deletion requirements. Photos uploaded by shoppers are used to run the search and are never stored. Storefront usage counts are kept as described in Storefront usage counts.
Shopix Swatches keeps and deletes data as described in Shopix Swatches. The changes it made to a store's products stay in the store after uninstall unless the merchant undoes them first.
For every Shopix app, after the store's data is deleted we keep a basic record of the install (the store's Shopify address and main domain, time zone, currency, Shopify plan, and the install and uninstall dates). We remove the store's contact details once no Shopix app is installed on the store.
Support requests. If you send us a support request from one of our apps, we keep its subject, category and messages while we help you and for up to 24 months after your last message, then delete them.
Security
We use industry-standard technical and organizational measures to protect the information we process, including encryption in transit and access controls.
Your Rights
Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, or delete your personal information. Merchants and shoppers can contact us to exercise these rights, and we will respond in accordance with applicable law. Shopper requests may be fulfilled through the relevant merchant, who is the controller of their store's customer data.
Changes
We may update this policy from time to time. We will post any changes on this page and update the date above.
Contact
Questions about this policy? Contact us at support@shopixai.com.
Shopix, 7 Hapelech Street, Tel Aviv, Israel