Privacy Policy — Nova AI Store Builder

Last updated: October 6, 2026

This Privacy Policy describes how Nova AI Store Builder ("Nova", "we", "us", or "our") collects, uses, and shares information when a merchant ("you", "Merchant") installs and uses our Shopify application ("App").

1. Information We Collect

From your Shopify store, via the Shopify Admin API, using the access scopes you approve at install:

• Store identification data (shop domain, store name, currency, plan)
• Product data (titles, descriptions, images, prices, variants) for products you choose to generate a store around
• Theme data (existing theme structure, so we can duplicate and customize it)
• Publication data (to publish the generated theme to your storefront)

Account and usage data we store ourselves:

• Your shop domain and Shopify session/access tokens (used only to act on your store on your behalf)
• Project records: the product you selected, chosen design, generation status, and generated theme files
• Billing records: your subscription plan and status, managed through Shopify Billing

We do not collect or store your customers' personal data. Nova does not access your customer list, orders, or checkout information. The storefronts we generate do not add any customer-tracking code beyond what your chosen Shopify theme already includes.

2. How We Use Information

We use the information above to:

• Generate a customized store theme based on the product you provide
• Publish and preview that theme on your store
• Operate your subscription and billing through Shopify Billing
• Provide customer support when you contact us
• Maintain, secure, and improve the App

AI processing: To generate store content (headlines, product copy, page structure), Nova sends the product information you provide (title, description, images, price) to OpenAI's API. OpenAI processes this data solely to return generated content back to Nova and does not use it to train its models under our API agreement with OpenAI. We do not send your customers' personal data to OpenAI or any other third party.

3. How We Share Information

We do not sell your data. We share information only with:

• Shopify, as required to operate the App within your store (this is inherent to how Shopify apps work)
• OpenAI, as described above, solely to generate store content
• Bright Data, which fetches the public supplier product page (for example an AliExpress listing) whose link you paste, so Nova can import its title, photos, price and public reviews. Only the product link is sent; no store or customer data is shared
• Our hosting provider (Railway), which stores App data on our behalf under standard hosting agreements
• Law enforcement or regulators, only if required by law

4. Data Retention

We retain your shop and project data for as long as the App remains installed on your store, plus a limited period afterward to allow reinstallation without data loss. If you uninstall the App, we deactivate your access tokens immediately. Under Shopify's data protection requirements, if a shop owner requests deletion of their data ("shop/redact"), we delete all associated records within 30 days of the App being uninstalled.

5. Your Rights (GDPR / CCPA)

Depending on your location, you may have rights to access, correct, or request deletion of your data. Because Nova is a Shopify App, these requests are typically handled automatically through Shopify's mandatory compliance webhooks:

• Customer data requests and customer data erasure requests from your own customers are forwarded to us by Shopify, and we confirm we hold no customer-level personal data to return or erase.
• Shop data erasure: when you uninstall the App, Shopify notifies us and we erase your shop's data as described above.

You can also contact us directly at the email below for any data request.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), access-controlled infrastructure, and Shopify's OAuth token model, which lets you revoke our access at any time by uninstalling the App.

7. Children's Privacy

The App is intended for use by business merchants and is not directed at children. We do not knowingly collect data from individuals under 16.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL with a new "Last updated" date. Continued use of the App after a change constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise a data right, contact us at:

Email: support@novastorebuilder.app