Privacy Policy

SKALEOAI ("we", "us", "our"), operating at skaleoai.com, is an AI-powered growth platform for Shopify sellers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. It applies to the SKALEOAI website, application, emails, and any connected services.

By creating an account or using SKALEOAI you agree to the practices described here. If you do not agree, please do not use the service.

a) Information you provide directly

• Account registration data — name, email address, and password (passwords are hashed; we never see or store them in plain text).
• Shopify store information when you connect your store (store name and domain).
• Business information you enter during onboarding — niche, business type, target audience, growth goals, and revenue figures.
• Payment information — processed entirely by LemonSqueezy, our Merchant of Record. We never receive or store your card details.
• Support ticket subjects, messages, and replies.
• Profile information and notification preferences.

b) Information collected automatically

• Usage data — features used, pages visited, and time spent in the app.
• Device information — browser type, operating system, and screen size.
• IP address and approximate location (country level only), used for security and rate limiting.
• Cookies and similar technologies (see the Cookies section below).
• Error logs and performance data, collected via Sentry to keep the service reliable.

c) Information from third parties

• Shopify store data — orders, products, customers, and analytics — only after you connect your store and grant permission via Shopify's official OAuth flow.
• Advertising platform data (Meta, Google, TikTok, Snapchat) — only if you explicitly connect those platforms.
• Google OAuth profile data (name, email, profile picture) — only if you choose to sign in with Google.

• Provide and improve our AI-powered growth platform.
• Generate personalized AI recommendations, audits, tasks, and reports using Claude AI models from Anthropic.
• Send daily task emails and weekly/monthly performance reports (you can opt out in Settings).
• Process subscription payments through LemonSqueezy.
• Provide customer support and respond to your tickets.
• Monitor, diagnose, and fix technical errors.
• Analyze aggregate usage patterns to improve features.
• Send important service announcements (security, billing, terms changes).
• Comply with legal obligations and prevent fraud and abuse.

SKALEOAI uses Anthropic's Claude AI models to analyze your store data and generate insights. When you use AI features (store audit, ARIA chat, daily tasks, reports, competitor research), relevant store context is sent to Anthropic's API to generate your personalized output. Anthropic's privacy policy is available at anthropic.com/privacy.

• We do NOT use your data to train AI models.
• AI-generated content is personalized to your store and never shared with other users.
• You can delete your AI conversation history at any time from the app, and can request full deletion by contacting support.

• We access your Shopify data only after your explicit permission through Shopify's official OAuth flow.
• We access: orders, products, customers, and store analytics.
• We do NOT access: customer payment information, your Shopify password, or checkout credentials.
• Store data is used solely to power your analytics, audits, and recommendations.
• You can disconnect your store at any time from Settings → Stores. Upon disconnection we stop syncing new data.

Connecting Meta, Google, TikTok, or Snapchat ad accounts is completely optional. SKALEOAI works fully without them.

• If connected, we access performance analytics only (spend, ROAS, campaign metrics).
• We do NOT run ads, modify campaigns, or change any settings in your ad accounts.
• Disconnect any platform at any time from Settings → Platforms.
• If a platform is not connected, we access zero data from it.

• Session cookies (required) — keep you signed in. They are httpOnly and secure, meaning scripts cannot read them.
• Referral cookie (optional) — a 90-day cookie that credits the affiliate who referred you. It contains only an alphanumeric code.
• We do NOT use advertising cookies or cross-site tracking.
• You can clear cookies through your browser settings at any time; clearing the session cookie signs you out.

We share data only with the service providers required to run SKALEOAI, each governed by their own privacy policy:

• Anthropic (AI processing) — anthropic.com/privacy
• Supabase (database and authentication) — supabase.com/privacy
• Shopify (store data source via OAuth) — shopify.com/legal/privacy
• LemonSqueezy (payments, Merchant of Record) — lemonsqueezy.com/privacy
• Resend (transactional email) — resend.com/privacy
• Vercel (hosting) — vercel.com/legal/privacy-policy
• Upstash (caching) — upstash.com/trust/privacy
• Sentry (error monitoring) — sentry.io/privacy

If, and only if, you choose to connect an advertising account, we access performance data from that platform through its official API. Data is processed through the following advertising providers under their respective policies. If you do not connect a platform, no data is exchanged with it:

• Meta Platforms (Meta Ads / Facebook / Instagram) — facebook.com/privacy/policy
• Google (Google Ads) — policies.google.com/privacy
• TikTok (TikTok Ads) — tiktok.com/legal/page/row/privacy-policy
• Snapchat (Snapchat Ads) — snap.com/privacy/privacy-policy

We do NOT sell your personal data, and we do NOT share your data with advertisers for their own advertising or marketing. Advertising platforms are used only to read the performance data of accounts you explicitly connect. We may disclose information if required by law, court order, or to protect the rights and safety of our users.

• Active accounts — data is retained while your account is active.
• Deleted accounts — personal data is deleted within 30 days of account deletion.
• Payment records — retained for 7 years where required by tax and accounting law (held by LemonSqueezy).
• Error logs — retained for 90 days.
• Email delivery logs — retained for 30 days.

Wherever you are in the world, you have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Correction — fix inaccurate or incomplete data (much of it directly in Settings).
• Deletion — delete your account and personal data (Settings → Security → Delete account, or by email).
• Portability — receive your data in a portable format.
• Consent withdrawal — disconnect integrations or close your account at any time.
• Marketing opt-out — disable non-essential emails in Settings → Notifications.

To exercise any of these rights, email support@skaleoai.com. We respond to all requests within 30 days.

SKALEOAI is a business tool and is not intended for children under 13 (or under 16 in the European Union). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

SKALEOAI operates globally. Your data may be processed and stored on servers located in the United States and other countries where our service providers operate. Where data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses maintained by our providers.

• All traffic is encrypted in transit with SSL/TLS.
• Databases are encrypted at rest.
• Row-level security is enforced on every database table, so your data is only ever accessible to you.
• Access tokens (e.g. your Shopify connection) are encrypted with AES-256 before storage.
• We conduct regular security audits of the platform.

No system is 100% secure. If we become aware of a breach affecting your data, we will notify you as required by law.

We may update this Privacy Policy from time to time. For material changes we will notify you by email before the change takes effect. Continued use of SKALEOAI after a change becomes effective constitutes acceptance of the updated policy. The "Last updated" date at the top of this page always reflects the current version.

For any privacy question, request, or complaint, email support@skaleoai.com. We respond within 30 days.