Privacy Policy - Sumo: Product FAQ Builder + AI

1 Introduction

Welcome to Sumo: Product FAQ Builder + AI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

By installing and using our app, you agree to the terms of this Privacy Policy. If you do not agree with these terms, please do not use our app.

2 Information We Collect

We collect the following types of information:

Store Information

Shop domain and name
Store owner email address
Shopify access tokens (for API access)
Billing and subscription information

Product Information

Product titles, descriptions, and metadata
Product images (for AI content generation)

FAQ Content

FAQ articles, categories, and content you create
AI-generated suggestions and content

Analytics Data

FAQ view counts and engagement metrics
Search queries made by your customers
Customer feedback on FAQ helpfulness

Note: We do not collect personal information about your customers. All analytics data is aggregated and anonymized.

3 How We Use Your Information

We use the collected information to:

Provide, maintain, and improve our app functionality
Generate AI-powered FAQ suggestions and content
Display FAQ content on your storefront
Provide analytics and insights about FAQ performance
Process billing and subscriptions through Shopify
Send important updates about our service
Provide customer support

4 Third-Party Services

We use the following third-party services:

Shopify: For app hosting, billing, and store data access
OpenAI: For AI-powered content generation (product data may be sent to generate FAQ suggestions)
Amazon Web Services (AWS): For secure data hosting and storage

These services have their own privacy policies, and we encourage you to review them.

5 Data Storage and Security

Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States. We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)
Secure database storage with access controls
Regular security updates and monitoring
Limited employee access to production data

6 Data Retention

We retain your data for as long as you have our app installed. Upon app uninstallation:

Your FAQ content and settings will be retained for 30 days (in case of reinstallation)
After 30 days, all your data will be permanently deleted
You may request immediate deletion by contacting us

7 Your Rights

You have the right to:

Access: Request a copy of your data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request your data in a portable format
Withdraw Consent: Uninstall the app at any time

To exercise any of these rights, please contact us using the information below.

8 GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). We process your data based on:

Your consent when installing the app
Contractual necessity to provide our services
Legitimate business interests

9 CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA). We do not sell your personal information to third parties.

10 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.