Privacy policy — Product Options

This policy describes what the Datima Product Options app ("the app"), made by Datima.ai ("we"), stores when a merchant installs it on a Shopify store, and what happens to that data afterwards. The app lets you build option sets — groups of fields such as an engraving line, a gift note, a choice, a date or a file — and a rule that decides which products show them. Shoppers answer the fields on your product page, and every answer is saved on the order line by Shopify as a line item property. The Expiry Management app has its own policy.

What we store

• Shop profile — your store's domain, your store's name, your email, its time zone and currency, and the scopes you granted, as provided by Shopify at install.
• Access token — the credential Shopify issues the app, stored encrypted (AES-256-GCM), bound to your store, and never shown.
• The option sets you create — each set's name, status and rule; each field's type, label, help text, placeholder, choices, maximum length and required flag; and, for the products or collections a set applies to, a snapshot of the id, title, handle and image you picked. Your shoppers see the fields on your product page.
• A short-lived cache — which collections a product belongs to, kept for five minutes so a rule that names a collection can be applied.
• Background job records and webhook receipts — what ran, when, and the payload Shopify sent: the install alert, the uninstall and compliance webhooks.
• A plan record and operational counts — the app is free and the record says so; counts such as how many sets exist and how many storefront requests were answered, to watch the app's health.
• Your app settings, if any, so they keep between visits.

Shopper answers never reach the app

What a shopper types or uploads travels from their browser to Shopify's cart and order, through your theme's own form. The app never receives, stores or serves an answer or a file: the order shows them, and an uploaded file is stored by Shopify and linked from the order. The app holds nothing about your customers, and it does not request protected customer data from Shopify: no name, address, email address, phone number or order.

What we don't do

• We don't sell, rent or share data with anyone for their own purposes.
• We run no advertising and no analytics on your store's data, and we don't use it to train models, profile your customers or advise other merchants.
• We don't read more of your store than the app's declared Shopify scopes allow.

Where it lives

The app runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest; access tokens are encrypted with rotating keys and bound to your store. Every store's rows are separated from every other store's at the database layer (row-level security), so no request can read another store's data. Shopify is the source of your products, your theme's settings and every order; nobody else receives your store's data.

Deletion

• Uninstall — on Shopify's app/uninstalled webhook the app destroys its access token and stops processing your store at once. Your option sets are kept so a reinstall restores them.
• Redaction — about 48 hours after an uninstall Shopify sends shop/redact, and every row of your store is deleted: option sets, fields, targets, job records, webhook receipts, plan and settings. The install record keeps only your store's domain and the dates.
• Customer requests — when Shopify sends customers/redact or customers/data_request for a customer, the app answers that it holds no customer data, because it never requested any.

Your rights

You can see and change everything the app holds for your store from inside the app, and delete it by uninstalling. If you are a customer of a store that uses the app, contact the store: the app holds nothing about you.

Website analytics

This website (datima.ai) uses Google Analytics to understand how visitors find and use the site — page views, referrers, and approximate location, collected with cookies set by Google only after you accept the cookie banner. That is the website, not the app: the app sets no cookies and runs no analytics on your store.

Changes

We will post changes to this page and update the date at the top.

Contact

Privacy questions: support@datima.ai.