Privacy Policy

• InvizoAI writes blog articles, product descriptions and image alt text for your Shopify store using OpenAI’s models.
• For each request, we send OpenAI the text it needs: product titles and descriptions, and the titles, descriptions and keywords you enter. We don’t send your images.
• InvizoAI doesn’t collect or process your customers’ personal information.
• We don’t store the content InvizoAI writes. It’s kept only in your Shopify store, once it’s saved or published there.
• We don’t sell personal information or use it for advertising.

To get a copy of your data, or to have it corrected or deleted, email privacy@invizo.io.

InvizoAI is a product of Invizo. In this policy, “we”, “us” and “our” mean Invizo, and “you” means the merchant who installs and uses InvizoAI.

This policy explains how we collect, use, share and protect information when you install InvizoAI on your Shopify store, use the app and its dashboard, or contact us. It also covers information about your store’s customers that InvizoAI processes for you.

It does not cover Shopify or any other service you connect to InvizoAI; those services have their own privacy policies. Your use of InvizoAI is also subject to our Terms of Service.

When you install InvizoAI, Shopify asks you to approve the access it needs to your store. InvizoAI uses that access as follows:

read_products

Read your products’ titles, descriptions and images, so InvizoAI can list them and write descriptions and alt text for them.

write_products

Save new descriptions to your products when you choose to.

read_files, write_files

Save alt text to your product images, which Shopify stores as files.

read_content, write_content

List your store’s blogs and publish the articles you choose to publish.

You can withdraw this access at any time by uninstalling InvizoAI from your Shopify admin.

The information we collect depends on the features you use. It comes from your Shopify store through the Shopify API, from details you enter in InvizoAI, and from messages you send us.

Store details

Your shop domain, and the dates you install and uninstall InvizoAI.

Shopify access token

The token Shopify issues so InvizoAI can read your products and save content to your store. We delete it when you uninstall the app.

Your settings

The AI model you choose, and the default titles, descriptions and keywords you save for each tool.

Token usage

How many AI tokens your store uses each month and, for each request, the tool, the model and the number of tokens used. We don’t keep the text of your requests or of what InvizoAI writes.

Product and request text

While you use a tool, InvizoAI reads your products’ titles, descriptions and images from Shopify, and the text you enter. It sends the text each request needs to OpenAI and doesn’t store it.

Support conversations

Messages you send us by email, and anything you include in them.

We use the information we collect to:

• Write the blog articles, product descriptions and alt text you ask for, and save or publish them to your store.
• Count the AI tokens your store uses each month, and apply your plan’s allowance and model.
• Show your products, images and blogs in the app.
• Answer your support requests.
• Keep a record of the stores that install and uninstall InvizoAI, so we can support merchants and run our business.
• Keep InvizoAI secure and working, for example by verifying requests from Shopify and investigating errors.

We don’t sell personal information or use it for advertising.

If you are in the European Economic Area (EEA) or the United Kingdom, data protection law requires a legal basis for each way we use personal information. We rely on the following bases:

Contract

To provide InvizoAI under our Terms of Service, including writing content with AI and saving or publishing it to your Shopify store.

Legitimate interests

To keep InvizoAI secure and reliable, answer support requests and keep records of the stores that use our apps. We rely on these interests only where your rights don’t override them.

Legal obligation

To keep the records that tax and accounting law require, and to respond to lawful requests from public authorities.

For your customers’ information, you decide the legal basis, as explained under Controller and processor roles.

When InvizoAI processes personal information about your store’s customers, you are the controller of that information and Invizo is your processor. We process it only to provide InvizoAI, on your instructions.

For information about you as a merchant, such as your store details and the messages you send us, Invizo is the controller.

InvizoAI writes content with OpenAI’s API. For each request, we send OpenAI only the text it needs. For articles, that is the title, description and keywords you enter and, for the full article, the outline. For product descriptions, it is the product’s title and current description and the focus, tone and keywords you enter. For alt text, it is the product’s title. Images are not sent.

OpenAI processes this text in the United States and may keep it for a limited time to detect abuse, as its API data policy describes.

AI-written text can be inaccurate, incomplete or unsuitable for your store. Review what InvizoAI writes before you publish or save it, and edit it where needed. You are responsible for the content you publish in your store.

Alt text is saved to the image in Shopify as soon as it’s written, replacing any alt text the image had. Generating for all images does this for each product image listed in the app, including images that already have alt text, until your monthly tokens run out.

A product description is saved to the product when you click Save to product, or straight away if you choose to update the product after generation. Saving replaces the product’s current description.

Published articles go live straight away on the blog you choose, with your store’s Shopify handle as the author and your keywords as tags.

We share personal information only with the sub-processors listed below, who help us run InvizoAI, and with services you connect to InvizoAI on your instructions. Those services’ own terms and privacy policies apply to them.

We may also disclose information when the law requires it, to protect the rights, property or safety of Invizo, our merchants or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your information.

InvizoAI’s servers are in Germany, and the text sent to OpenAI for each request is processed in the United States. Invizo is based in Bangladesh, and the team that runs and supports InvizoAI may access data from there. Your information may therefore be processed in countries whose data protection laws differ from those where you live.

Our sub-processors and their locations are listed under Sharing and sub-processors.

We keep your settings and token-usage records while InvizoAI is installed. Our server logs record your shop domain when Shopify notifies InvizoAI of events such as an uninstall, along with any errors. We keep basic records of your account, such as your shop domain and install and uninstall dates, for as long as we need them for accounting, tax and legal purposes.

For what happens when you remove the app, see Deletion when you uninstall.

When you uninstall InvizoAI, we delete the access token Shopify gave us. Your settings and token-usage records stay stored until you ask us to delete them. We delete them from our database within 30 days of your request. Content already saved or published in your store stays there; remove it in Shopify if you no longer want it.

To ask us to delete your information, email privacy@invizo.io.

We protect the information InvizoAI handles with these measures:

• Every webhook from Shopify is verified with Shopify’s signature before InvizoAI acts on it.
• The app’s screens open only after Shopify confirms who is signed in.
• Traffic between your browser, Shopify, InvizoAI and OpenAI is encrypted with HTTPS.

No way of storing or sending data is completely secure, so we can’t guarantee absolute security. If a security incident affects your data, we will tell you without undue delay and notify the authorities where the law requires.

If you think your account or data has been compromised, email privacy@invizo.io.

InvizoAI doesn’t set its own cookies, and it doesn’t use analytics, advertising cookies or tracking pixels.

The app runs inside your Shopify admin, which uses Shopify’s own cookies. Shopify’s privacy policy explains them.

Depending on where you live and the laws that apply, you may have the following rights over your personal information.

European Economic Area and United Kingdom

If you are in the EEA or the UK, the GDPR and the UK GDPR give you the right to:

• Access the personal information we hold about you.
• Have inaccurate or incomplete information corrected (rectification).
• Ask us to erase your information (erasure).
• Ask us to restrict how we process your information.
• Object to processing based on our legitimate interests.
• Receive the information you gave us in a structured, machine-readable format, or have it sent to another provider (portability).
• Withdraw your consent at any time, where we rely on consent.
• Complain to a data protection supervisory authority, such as the one where you live or work.

California

If you are a California resident, the CCPA, as amended by the CPRA, gives you the right to:

• Know what personal information we collect, use and disclose, and get a copy of it.
• Delete personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Not be discriminated against for exercising these rights.

How to exercise your rights

To make a request, email privacy@invizo.io. We reply within one month. Before we act on a request, we may ask you to confirm it comes from you, for example by writing from your store’s contact email address.

If you shop at a store that uses InvizoAI

Please contact that store first. Stores can pass access and erasure requests on to us.

InvizoAI is a tool for businesses and isn’t meant for children. We don’t knowingly collect personal information from children for our own purposes. If you think we have, email privacy@invizo.io and we will delete it.

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If we make significant changes, we will also tell you by email or in the app before they take effect.

If you have questions about this policy or how we handle your information, contact Invizo: