Privacy policy

This policy describes what the Datima.ai Expiry Management app ("the app") stores when a merchant installs it on a Shopify store, and what happens to that data afterwards. Our other app, Datima Product Options, has its own policy.

What we store

• Shop profile — your shop domain, name, contact email, timezone, and currency, as provided by Shopify at install.
• Access token — the credential Shopify issues the app, stored encrypted (AES-256-GCM) and bound to your shop.
• Catalog mirror — products, variants, locations, and inventory levels, synced from your store so the app can work without calling Shopify on every screen.
• Data you create — batches (expiry dates, quantities, lot codes, bins, notes), import files, and an audit trail of edits.
• Order-derived records — for each fulfillment or refund, the order and line-item identifiers and quantities needed to attribute stock movements to batches. We do not store customer names, addresses, emails, or payment details.

What we don't do

• We don't sell or share your data with third parties.
• We don't use your data to train models or profile your customers.
• We don't read more of your store than the app's declared Shopify scopes allow.

Where it lives

Data is stored on infrastructure operated for Datima.ai, isolated per shop at the database layer (row-level security). Access tokens are encrypted at rest with rotating keys.

Deletion

• Uninstall — background processing stops immediately. Your data is retained for a grace period so a reinstall restores it, then purged on the schedule Shopify's data-protection webhooks mandate.
• GDPR requests — the app implements Shopify's mandatory customers/data_request, customers/redact, and shop/redact webhooks. Because we hold no customer personal data, customer requests are answerable with an empty disclosure; shop redaction deletes everything.
• Export first — you can export every batch you've recorded as CSV at any time, on any plan, in any subscription state.

In-app analytics and session replay

Inside the app itself we use Mixpanel to understand how merchants use it and to diagnose problems: which screens are opened, a small set of actions (a batch saved, an import confirmed, a plan chosen), and a session replay — a recording of what the app’s own screens looked like during a session. Replays capture the app’s interface only, never the rest of your Shopify admin. Everything you type is masked before it leaves your browser, product images are blocked, and no customer names, addresses or emails appear because the app never holds them. Sessions are identified by your store domain, not by a person, and your contact email is not sent. Replays are kept for 30 days. The recording respects your browser’s Do Not Track setting; to opt out entirely, email support@datima.ai and we will disable it for your store.

Support chat

The chat button inside the app is provided by Crisp, which processes support conversations on our behalf. When you open it, we tell Crisp your store’s domain, store name, contact email, plan and admin language so that the person replying already knows which store they are talking to. Crisp stores the conversation and those fields; nothing about your products, batches or customers is sent. If you would rather not use the chat, email support@datima.ai instead — the same people answer.

Website analytics

This website (datima.ai) uses Google Analytics to understand how visitors find and use the site — page views, referrers, and approximate location, collected with cookies set by Google only after you accept the cookie banner; if you decline, Google Analytics runs in cookieless mode (aggregate counts, no identifiers). Analytics runs on the marketing site only, never inside the app in your Shopify admin, and is not linked to any store or merchant data. You can change your choice at any time via Cookie settings in the footer, or opt out globally with Google's browser add-on. See Google's privacy policy for how Google processes this data.

Contact

Privacy questions: support@datima.ai.