Privacy Policy

Last Updated: March 13, 2026

1. Introduction

TheShop.ai (“TheShop.ai,” “we,” “us,” or “our”) operates the software-as-a-service platform available at theshop.ai (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our Service.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use the Service.

For questions or concerns about this policy, contact us at support@theshop.ai.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration Data. When you create an account, we collect your full name, email address, and password (stored in hashed, non-recoverable form).

Billing and Subscription Data. When you subscribe to a paid plan, we collect billing information through our third-party payment processor, Stripe, Inc. (“Stripe”). TheShop.ai does not directly store or process your full credit card number or bank account details. Stripe collects and processes this information on our behalf, subject to Stripe's Privacy Policy.

User Content. When you use features of the Service, we collect all content you submit, including text, images, configuration settings, and other materials.

Communications. If you contact us for support or other purposes, we collect the content of your messages and any information you choose to include.

2.2 Information Collected Automatically

Usage and Log Data. When you interact with the Service, our servers automatically collect your IP address and approximate geographic location, browser type and version, operating system, pages visited, features used, time spent, referring URLs, and timestamps.

Device Information. We collect information about the device you use to access the Service, including device identifiers, screen resolution, and connection type.

Cookies and Similar Technologies. We use cookies and similar tracking technologies as described in Section 6 below.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Operating the Service — creating and managing your account, processing subscription payments, and sending transactional communications.
• Improving and Developing the Service — analyzing usage patterns, diagnosing and fixing bugs, developing new features, and conducting internal research.
• Security and Fraud Prevention — verifying your identity, detecting and preventing fraudulent transactions and abuse, and enforcing our Terms of Service.
• Communications — responding to your support requests, sending service announcements, and with your consent, sending promotional communications (you may opt out at any time).
• Legal Compliance — complying with applicable laws, regulations, and responding to lawful requests.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases:

• Performance of a contract — account creation, management, subscription billing, and payments.
• Legitimate interests — service improvement, analytics, security, and fraud prevention.
• Consent — marketing communications.
• Legal obligation — legal compliance.

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• Service Providers — we engage trusted third-party companies to help operate the Service, including Stripe for payment processing, cloud infrastructure providers, email delivery services, and analytics platforms.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity with prior notice.
• Legal Requirements — we may disclose your information to comply with applicable law, enforce our Terms, or protect rights, property, or safety.
• With Your Consent — we may share your information for other purposes with your explicit consent.

6. Cookies and Tracking Technologies

We use cookies and similar technologies on the Service. These include:

• Strictly Necessary Cookies — essential for the Service to function, including session authentication and security cookies.
• Functional Cookies — remember your preferences and settings.
• Analytics Cookies — collect information about how you use the Service in aggregated form.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information. To exercise your rights, contact us at support@theshop.ai.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption of data in transit (TLS/SSL) and at rest, access controls, and regular security assessments.

10. International Data Transfers

TheShop.ai operates from the United States. If you are located outside the United States, your information will be transferred to and processed in the United States.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a prominent notice on the Service.

13. Contact Us

If you have any questions about this Privacy Policy, contact us at:

TheShop.ai
Email: support@theshop.ai
Website: https://theshop.ai