Privacy Policy
How BAIFPO processes product content, BYOK AI provider keys, Shopify data and telemetry — and how you can delete data.
1. Controller
Krzysztof Jaroszuk, Złotniki 42, 16-061, Poland. Contact email: [email protected].
2. What BAIFPO is
BAIFPO (BYOK AI for Product Optimization) is a read-only Shopify application that analyzes product titles, descriptions and tags, identifies content issues, and generates grounded improved drafts using AI providers chosen and configured by the merchant (BYOK).
3. Data we process
Shopify account/store data: shop identifier and myshopify domain; staff identity claims provided by the Shopify session; subscription/billing status from Shopify App Pricing.
Product content: when you run an analysis we process the product data needed for that request (title, description, tags, content hashes) and store analysis results, findings, improved drafts, catalog-intelligence records, and usage/entitlement records.
BYOK provider credentials: your AI provider API key is encrypted at rest (Fernet), decrypted only server-side for a request, never returned to the browser, never logged, and never included in telemetry.
Telemetry: provider and model used, token counts, estimated cost, latency, success/error category, timestamps. Prompts and raw provider responses are not stored.
4. Legal basis
Performance of the service contract, legitimate interest in operating and securing the service, and legal obligations (e.g., billing records).
5. Recipients and processors
- Shopify Inc. / Shopify International Ltd. — platform, billing, hosting of the embedded app and App Store.
- Railway Corp. — cloud hosting (application, PostgreSQL, Redis).
- Cloudflare, Inc. — DNS, CDN, TLS/security in front of our website and API. Cloudflare may process connection data (IP, TLS metadata) and set strictly necessary technical cookies under its Privacy Policy and DPA (cloudflare.com/privacypolicy, cloudflare.com/cloudflare-customer-dpa).
- AI providers you choose (e.g., OpenRouter, Google Gemini, OpenAI, DeepSeek, Anthropic, Mistral, Groq, Perplexity, NVIDIA) — content needed for an AI request is sent to the provider you configured, under that provider's terms and privacy policy.
We do not sell personal data. Where data is transferred outside the EEA, transfers rely on the processors' standard contractual clauses or equivalent safeguards.
6. BYOK and merchant control
BAIFPO is BYOK-only. You decide which provider and model to use and control your provider account and key. BAIFPO does not pay for AI inference, bundles no AI credits, and adds no AI markup.
7. Retention
Account, analysis, catalog-intelligence, usage and telemetry data are retained while you use the app and as needed for the purposes above. Billing records are retained as required by law. Provider credentials are retained until you remove the provider or uninstall the app.
8. Deletion and your rights
- Uninstall: tenant-scoped data (analyses, AI cache, telemetry, usage records, provider credentials) is removed and subscription state is deactivated.
- Shopify redaction webhooks (
customers/data_request,customers/redact,shop/redact) are handled; shop redaction removes tenant data. - Under applicable law (including the GDPR/RODO) you may request access, correction, erasure, restriction, portability, or object to processing by contacting the controller.
9. Security
HTTPS in production; credentials encrypted at rest with server-side-only decryption; tenant isolation between stores; sanitized errors; fixed/allowlisted provider URLs; no credential logging. No service can guarantee absolute security.
10. Cookies and website
The BAIFPO website does not use advertising cookies. Strictly necessary technical cookies/connection data may be set by Cloudflare or hosting services under their policies.
11. Contact
Krzysztof Jaroszuk, Złotniki 42, 16-061, Poland · [email protected]
12. Changes
Material changes will be reflected here with a new "last updated" date.