Privacy Policy

Effective Date: May 30, 2025

1. Overview

SiteMuse ("SiteMuse", "we", "us") provides an AI-powered theme generation app for Shopify merchants. This policy explains what information we collect when you install or use the SiteMuse app, visit `sitemuse.ai` or `app.sitemuse.ai`, or contact us (together, the "Services"), and how we use and share it.

SiteMuse is a tool for merchants and their staff. It is not designed to collect information about your store's shoppers — see Your Store's Customers below.

‍

2. Information We Collect

Information you give us. The brand inputs you enter when creating a project — your brand name and description, target customers, product positioning, and links to your existing store; files you upload, such as logos and product images; the messages you send to the SiteMuse AI agent; and any support requests or in-product survey responses.

We do not ask you to create a separate SiteMuse account, and we do not collect your name or email address directly — we receive them from Shopify, as described below.

Information Shopify gives us. You sign in to SiteMuse through Shopify, and Shopify provides us with your store's identity and contact details rather than us collecting them from you. At install we retrieve and store your store name, store contact email address, currency, store domain, owner name, and locale, along with the API access tokens and granted scopes that let the app work on your store. Your Shopify session also gives us the Shopify user ID, first and last name, email address, locale, and account-owner or collaborator status of the staff account signing in. Shopify additionally sends us install, uninstall, and scope-change events, and the status of charges you make through Shopify Billing.

Store data we access. To build and publish your theme, SiteMuse reads and writes store data through Shopify's APIs using the scopes you grant at install: themes and theme files, products, collections, pages, blog articles, navigation, files and media, metaobjects, publications, and store policies. This is business data, though it may incidentally contain personal information you have entered into it.

Information we collect automatically. Device and browser information, IP address, and usage events describing how you move through the app — for example, creating a project, completing an onboarding step, starting or finishing a theme generation, or purchasing and publishing a project — along with server logs and error diagnostics.

‍

3. How We Use Your Information

We use this information to:

• Operate the Services — authenticate you, connect your store, run the AI agent, generate and store themes and assets, render previews, and publish to your store;
• Generate your theme, which involves sending your brand inputs, uploaded images, chat messages, and relevant store content to the AI providers described below;
• Process purchases made through Shopify Billing and maintain your credit balance and project quota;
• Provide support, respond to your requests, and send service and — where permitted — product update messages;
• Detect and prevent fraud, abuse, and security incidents, and comply with legal obligations;
• Understand feature adoption and improve the reliability and quality of the Services.

‍

4. Sharing of Information

We do not sell your personal information, and we do not share it for advertising purposes.

We share information with service providers who help us operate the Services — hosting, storage and databases (Amazon Web Services), screenshot rendering, and product analytics (PostHog). These providers may process your information only to provide their service to us.

Generating a theme requires sending your brand inputs, chat messages, uploaded and referenced images, and relevant store content to third-party AI providers acting on our behalf, currently including Anthropic and OpenAI for language and code generation, alongside image generation and stock image providers for visual assets. We do not use this information to train AI models, and we do not permit our providers to use it to train theirs.

We also share information with Shopify, in order to read and write the store data needed to generate and publish your theme and to process charges. Purchases run through Shopify Billing using the payment method already on file with Shopify — *we never receive or store your payment card details.

Beyond that, we may disclose information where you direct us to; to professional advisors; in connection with a merger, acquisition, financing, or sale of assets; and where we believe in good faith that disclosure is required to comply with law or legal process, or to protect our rights or the rights and safety of others.

Our infrastructure and providers are located in the United States, so your information is transferred to and processed there. Where we transfer personal information out of the EEA or UK, we rely on Standard Contractual Clauses or another approved transfer mechanism.

‍

5. Cookies and Analytics

We use cookies and browser storage to keep you signed in, maintain your embedded Shopify admin session, and remember your preferences. We use PostHog to collect the product-analytics data described above. We do not use cookies for behavioral advertising or ad targeting.

Most browsers let you block or clear cookies and site storage through their settings, though doing so may prevent parts of the Services, including sign-in, from working.

‍

6. Your Store's Customers

SiteMuse is not designed to collect, store, or process your shoppers' personal information, and we do not request access to your Shopify customer or order records for that purpose. The Storefront API scopes the app requests exist so that generated themes function as normal Shopify storefronts; where a theme uses those capabilities, the requests happen between the shopper's browser and Shopify, and that data is not routed to or retained by us.

You remain responsible for your shoppers' personal information, and your own privacy policy governs how you handle it.

‍

7. Data Retention

We keep your account, store, and project data for as long as the app is installed on your store.

When you uninstall, we mark your store inactive and stop using its access tokens. Shopify sends us a store redaction request 48 hours after uninstall, and we erase your store's personal information from our systems within 30 day of receiving it. This gives you a short window in which reinstalling recovers your work, but we do not retain your data beyond it.

We retain product analytics for *12 months and server logs for *30 days. Billing, charge, and credit records are kept for as long as tax, accounting, and audit obligations require — this is the one category we retain after a redaction request, because law requires us to.

‍

‍

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, to object to or restrict how we use it, and to withdraw consent where we rely on it. California residents may also request details of the categories of information we collect and disclose. We will not treat you differently for exercising these rights.

To make a request, email us at the address below. We may need to verify your identity — for example, by confirming your store domain or account email — before we respond. If you are unhappy with our response, you may appeal by replying to us, or complain to your local data protection authority.

As a Shopify merchant, you can also exercise these rights through Shopify. We handle the mandatory Shopify compliance requests: shopper data requests, shopper redaction requests, and store redaction requests received after uninstall or plan cancellation.

‍

9. Data Security

We implement industry-standard security measures to protect your Personal Information. While we strive to protect your data, no method of electronic transmission or storage is 100% secure. You acknowledge and accept this inherent risk.

‍

10. Minors

Our Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Information from minors. If we learn that a minor has provided us with data, we will take steps to delete it promptly.

‍

11. Changes to This Policy

We may revise this Policy periodically. When we do, we will update the effective date at the top of this page. Continued use of our Services constitutes your acceptance of the updated Policy.

‍

12. Contact Us

If you have questions, concerns, or requests related to this Policy or your data, you may contact us at:

Email: hello@sitemuse.ai

‍