Privacy Policy

Effective Date: October 15, 2026

1. Introduction

This Privacy Policy describes how the "BSV Soft EU AI Companion" app (the "App") collects, uses, and shares information when you install or use the App in connection with your Shopify-supported store, and when visitors browse a store that uses the App. The App is provided by Berk Strategic Ventures LLC, doing business as BSV Soft ("we", "us", or "our").

The App is built to collect as little as possible. It requests access to your products, which it uses only to find the products you mark with a disclosure tag and to set its own badge field on them. It never changes your product content. It has no access to your customers or orders, sets no cookies, and never stores the personal data of your store's visitors.

2. Information We Collect

• Shopify store data: We store only what Shopify provides to keep the App installed and working: your store's domain and the authentication session tokens. Your plan comes from Shopify, which handles billing through Shopify App Pricing; we never see your payment details.
• Settings the App keeps in your store: On each product with one of the App's disclosure tags (such as EU-AI-Generated or EU-AI-Text), the App sets its own read-only field, "EU AI Companion badge", which says whether the product shows the badge under your plan's product limit. It also keeps your plan and product count in its own settings in your store. These stay in your Shopify store, where you can see them; we don't copy your product data to our servers.
• Visitor location check: To decide whether to show the badge, the visitor's browser sends a request to our edge service (Cloudflare Workers). Cloudflare works out the visitor's country from the connection. The IP address is used only for this lookup: it is never logged or stored, and it never reaches the App's servers. The service replies only with the country code and whether it is in the European Union. This check is strictly necessary for the badge to work.
• Anonymous service metrics (only with analytics consent): When a visitor views a product page and has allowed analytics in your store's cookie banner (via Shopify's Customer Privacy API), the badge sends one anonymous event. It contains only:
  • your store's domain (for example your-store.myshopify.com);
  • whether the product carries a disclosure tag;
  • whether your subscription is active;
  • the badge result (shown, hidden, or the visitor left before the check finished);
  • how the decision was made (location check, browser time zone and language check, shown to everyone on demo stores and test links, or not needed, for example because the product is beyond your plan's product limit);
  • where the badge was placed (on the product image or in a fixed corner);
  • the badge script version and a test-traffic flag.

  Our edge service adds the visitor's country, worked out as described above. We do not collect IP addresses, browser or device details, cookies, identifiers, customer or product IDs, or page URLs. Events cannot be linked to each other or to any person. If a visitor declines analytics, no event is sent and the badge still works normally.

3. How We Use the Information

We use the information only to:

• Show the badge to the right visitors based on their country.
• Authenticate your store, and check your plan with Shopify to apply its product limit and features.
• Show you in the App how many products use the badge and, on the Pro plan, aggregated badge activity (views, badges shown, by country) and a disclosure report.
• Detect and fix problems, for example alerting us when badges are not being shown as expected.

On the Standard and Pro plans, the badge also adds the product's disclosures to the product page as machine-readable data (JSON-LD). This uses only the product's title, price, availability and tags, which the page already shows; nothing is sent to us.

4. Data Retention

• Service metrics are stored in aggregated form in Cloudflare Analytics Engine and are deleted automatically after about 90 days.
• Store data (session tokens) is deleted when you uninstall the App, or at the latest when Shopify sends its store data deletion request.
• The App's settings in your store (the badge field on products, your plan and product count) are removed by Shopify after you uninstall the App; Shopify may keep them for a short time in case you reinstall. The badge field is removed from a product when its disclosure tag is removed.

5. Data Sharing and Service Providers

We do not sell, rent, or trade any data. We use these service providers to run the App:

• Cloudflare: edge location check and storage of anonymous service metrics.
• Fly.io: hosting of the App's admin interface and store session data.
• Shopify: installation, authentication, and billing through Shopify App Pricing.

6. Cookies and Browser Storage

The App does not set cookies on your storefront, and it uses no browser storage for your visitors. Only in a debug tab that you open from the App ("Debug badge on my store") does it keep the debug settings in that browser tab's session storage and tab name, until the tab is closed. It reads your store's existing consent choice through Shopify's Customer Privacy API.

7. Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that it be corrected, updated, or deleted. Service metrics are anonymous, can't be linked to any person, and are deleted automatically after about 90 days. To exercise these rights or ask about the metrics for your store, contact us using the details below.

8. Changes to This Policy

We may update this policy from time to time. We will change the effective date above and, for significant changes, let merchants know through the App or by email.

9. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at legal@bsvsoft.com.