Privacy Policy

1. Who we are and who this covers

Hunni Development ("SiteRemora," "we," "us," "our") makes the SiteRemora app for Shopify and runs https://siteremora.com. This policy covers:

• Merchants and their staff who install the app on a Shopify store, use it in the Shopify admin, or contact us.
• Visitors to https://siteremora.com, including people who sign up for updates, book a demo, run the free store scan or email us.
• Agencies and partners we work with, for the contact details they give us.

It does not cover the shoppers who visit your storefront. The app does not request Shopify's customer or order permissions, and it collects nothing from your shoppers' visits, carts, orders or checkout. The fixes it writes into your theme change markup and styles; they add no tracking scripts, cookies or pixels. Scans see your storefront the way any visitor does, so if a public page shows a person's details, such as a reviewer's name, a snippet or screenshot in your scan results can include them.

For the data in your Shopify store that the app accesses on your instructions, you are the controller and we act as your processor. For your account with us, your correspondence with us and your visits to this website, we are the controller.

2. What we collect

From Shopify, when you install the app

• Your store's myshopify domain and its name.
• An access token and a refresh token for the permissions you approve on the install screen. Today those are read_themes, write_themes, read_products, write_products and read_content. The app asks for one more, write_online_store_pages, inside the app the first time you fix the content of a Shopify page or blog post, and uses it only if you grant it.
• With those permissions the app reads your theme files and writes into them the fixes you approve, the fixes autopilot applies when you turn it on, and the edits you save in the app's code view. It reads your products, collections and image files with their image descriptions, and writes the descriptions you approve. It reads your pages, blogs and articles and, with the optional permission, rewrites the body of a page or blog post to fix its structure or remove markup pasted in with its text.
• The email address on your store, which we read the first time we email you. You can change the address we use in Settings.

While the app runs

• Storefront pages. To scan, our servers open your storefront pages in a browser, the way a visitor's browser would, with their HTML, styles, scripts and images. Pages are checked in memory, and we store only the results below.
• Scan results. For each issue: the rule, how serious it is, a snippet of the page markup around the element, where the element sits on the page, and the theme file and line we trace it to. For image issues, the image's address and the products, collections or files that use it, with their image descriptions. For text that is hard to read, the colors we measured and a small screenshot of the part of the page around it.
• Theme files. We read the files of your published theme, and of any draft theme you scan, to trace issues to code and to draft fixes. That happens when you run a scan, draft, apply or revert a fix, or open a file in the app's code view; during the automatic scans on Reef and Deep Sea; and on Deep Sea with autopilot turned on, when it looks for rule-based fixes after an automatic scan. From theme files we keep the snippets that appear in scan results and the code each fix replaced and added.
• Store changes. Shopify tells us when a theme is published or updated and when a product changes. On Deep Sea we also check every 15 minutes when your live theme was last edited. We use these signals to decide when to rescan. For a product change we keep the product's handle and a fingerprint of the change, not the product itself.
• Image descriptions across your catalog. Once a week, and the first time you open your scan results, the app lists your active and draft products, your collections and your image files with their image descriptions, and counts the images that have none. It keeps the list of images missing a description (name, image address and a link into your admin) until the next count replaces it.
• Fixes. For each fix the app applies: the file or record it changed, the code or text it replaced and the code or text it added (including an image's previous description, or a page's previous body), when it was applied, whether you or autopilot applied it, and whether it was reverted.
• Settings and plan. Your plan and billing dates as Shopify reports them, your fix mode, the pages you chose to scan, your email choices, a partner code if you entered one, and the issues you mark as fixed.
• Storefront password, if your storefront is password protected. If you type it for one scan, that scan uses it and discards it when it ends. If you save it in Settings or during onboarding so every scan can open your storefront, we store it encrypted, try it once on your storefront's password page when you save it, and decrypt it only to hand it to a scan, which discards it when it ends. Removing it in Settings deletes it.
• Activity records. Scans started, AI drafts with the number of tokens they used and their cost, fixes applied and reverted, settings changed, upgrade prompts opened, how long each scan took, and your daily score. We also log the emails we send you: the kind of email, the address, the subject and the time.
• Operational logs. Request times, store domains, scan and job identifiers, error details, and the IP addresses of requests to our servers. We keep access tokens and passwords out of them.

From this website

• If you book a demo: your name, email address, website, platform and message. If you sign up for updates: your email address and where on the site you signed up. We record the time of each.
• If you run the free store scan: the store address you enter, what the scan reads from that store's public pages (facts from its home page and the results of the automated checks, which can include short snippets of the pages' code), and a one-way hash of your IP address. We use the hash only to limit how many scans one visitor can start, and it cannot be turned back into the address. If you ask for the full report, we also keep your email address and the time you asked. When the form shows a check that you are a person, Cloudflare Turnstile runs it in your browser.
• Usage analytics through Google Analytics: pages viewed, approximate location, device and browser type, the referring site, and interactions. Google sets cookies on this website for this. If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics runs only after you allow it (see Cookies). Google says Google Analytics 4 does not log or store IP addresses.
• Server logs, including IP address and browser user agent, kept for security.

From you

• What you send us when you email us or ask for support.
• For agencies in our partner program: the agency's name, a contact email and the partner codes we issue.

What we do not collect

• Payment card details. Shopify bills you, and we never see your card.
• Your Shopify password. You sign in through Shopify, and uninstalling the app ends its access.
• Data about your shoppers, their carts, their orders or checkout.

3. How we use it

• To provide the Service: scan and check your storefront, trace issues to their source, draft fixes, apply the fixes you approve or that autopilot applies when you turn it on, keep the before-and-after record that makes revert possible, rescan on your plan's schedule or after changes, and show all of this in your admin.
• To email you: the messages the Service needs, such as the welcome email, your first scan's results and plan changes; the Sunday summary and, on paid plans, the monthly change report; and tips and product news. You can turn off the summary, the report and the tips in Settings or from the emails themselves.
• To bill you for the plan you chose, through Shopify.
• To support you and look into problems you report.
• To keep the Service running, secure and affordable. We watch scan times, failures and AI usage for each store, and we use aggregated, de-identified statistics about which checks fail most and how fixes perform. Those statistics do not identify a store.
• For the free store scan: to run the scan you asked for, show you the results at a private link, and, if you ask for the report, email it to you once, tell our team that you asked, and add the store and your address to our sales records so we can follow up. You can ask us not to.
• To comply with law, enforce our Terms and protect our rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your theme code, your catalog or your scan results to train machine-learning models, and we do not allow our providers to.

4. Artificial-intelligence processing

Some features send material to a third-party AI model provider to draft a suggestion. Scans run without AI, and autopilot applies only rule-based fixes. What each feature sends:

• Code fixes. The rule, the rendered HTML of the element that failed, and the theme code involved: an excerpt of the theme file around the line we traced it to or, when we cannot pinpoint the line, the theme files that render the page, up to a size limit. For a color fix, the current color and the one you chose.
• Image descriptions. The image itself. We download it from your store and send a copy shrunk to at most 1,024 pixels on its longest side; if we cannot download it, we send its public web address and the provider fetches it. With it we send your store's myshopify domain, the address of the page the image appears on and, when we know it, the name of the product or collection it belongs to.
• Theme code reviews you start. The theme files being reviewed.

The provider processes this material as our processor, through its commercial API. Its commercial terms do not allow it to train models on this material, and it keeps inputs and outputs only for the limited time those terms allow. Drafts go through our own automated checks before you see them, and nothing a model drafts is written to your store until you apply it.

5. Who processes data for us

We use a small number of providers under written agreements that limit them to processing data on our instructions:

• Shopify (Canada and worldwide): the platform, the install and sign-in flow, billing, and the Admin API through which the app reads and writes your store.
• Hosting (United States): runs the app and this website, their server functions and scheduled jobs.
• Scanning servers (United States): run the browsers that open and check your storefront pages. They use your store's access token to read theme files and catalog details during a scan, hold page data in memory while the scan runs, and write results to our database.
• Database hosting (United States): our PostgreSQL database, encrypted at rest.
• An AI model provider (United States): drafts suggestions as described above.
• Email delivery (United States): sends the app's emails. It records delivery and, for tips and product news, opens and clicks, and it keeps the list of addresses that opted out.
• Cloudflare (worldwide): Turnstile, the check on the free scan form that tells people from automated traffic.
• Google (worldwide): Google Analytics for this website, and Google Sheets with Apps Script, where demo requests, update sign-ups and free scan report requests are stored and forwarded to our email.

Email hello@siteremora.com for the current list of providers by name. We will update this list when we add or replace a provider. We do not transfer your data to anyone else except as this policy describes, in connection with a merger, acquisition or sale of the business (in which case this policy continues to apply), or where the law requires it.

6. Where data is stored

We store data in the United States. Shopify and Google may also process it in other countries where they operate. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the United States. For those transfers we rely on the Standard Contractual Clauses approved by the European Commission and the UK Addendum, as included in our providers' data processing terms, and on a provider's certification under the EU-U.S. Data Privacy Framework where it holds one. Merchants can ask us for a data processing agreement.

7. How long we keep it

While the app is installed

• Results for individual pages: deleted after 30 days, except the latest result for each page of each theme and every page of your most recent scan.
• The full results of a scan: cleared after 45 days, except your 20 most recent scans and the latest scan of each theme. The scan's date and score stay in your history.
• On Deep Sea, the quick scans that follow a store change: their results are cleared once a newer scan of the same theme exists and the quick scan is an hour old.
• Notices of store changes from Shopify: deleted 30 days after we act on them.
• The list of images missing a description: replaced by each new count.
• Fixes, settings, the issues you mark as fixed, activity records and the email log: kept while the app is installed, so the record and revert keep working.
• Your storefront password: until you remove it or your store's data is deleted.

After you uninstall

• Access and refresh tokens: deleted as soon as Shopify tells us the app was uninstalled.
• Everything else about your store: deleted when Shopify sends its shop/redact request, about 48 hours after you uninstall. If you reinstall before then, we keep your data.
• The fixes already written into your theme and catalog stay in your store. Revert any you want undone before you uninstall.
• If you want your store's data deleted sooner, email us.

Other records

• Operational logs and website server logs: up to 30 days.
• Support correspondence: up to 3 years, so we can follow up on earlier issues.
• Demo requests and update sign-ups: until you ask us to delete them or we no longer need them.
• Free store scans, with their results, the IP hash and any email address given for the report: deleted 90 days after the scan. A report request copied to our sales records stays there until you ask us to delete it or we no longer need it.
• If you turn off tips and product news, your address stays on our email provider's opt-out list so the choice holds.
• Google Analytics data: for the retention period set in our Google Analytics account.
• Aggregated, de-identified statistics: indefinitely, because they cannot be tied back to a store.
• Deleted data can remain in our database provider's routine backups until those backups expire.

The app subscribes to Shopify's compliance webhooks. On shop/redact we delete every record associated with the store on receipt, unless the app has been reinstalled on that store in the meantime. The customers/data_request and customers/redact requests are acknowledged and logged; we hold no customer data, so there is nothing to return or erase.

8. Security

Data travels over encrypted connections (TLS) between your browser, Shopify, our servers and our AI and email providers. Our database is encrypted at rest. The app reaches your store through scoped tokens from Shopify, which you can revoke by uninstalling. A saved storefront password is encrypted with a key only our servers hold. Access to our infrastructure is limited to the people who need it. Each fix keeps the code it replaced, so you can revert it from the app. No system is perfectly secure; if a breach affects your data we will notify you, Shopify and any authority the law requires, without undue delay.

9. Your rights

Depending on where you are, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable form, to object to or restrict certain processing, to withdraw consent where processing rests on consent, and to complain to a supervisory authority. Merchants can do much of this in the app: your scans, issues, fixes and settings are there, uninstalling deletes your store's data on the schedule above, and on plans that include it the record of scans and fixes can be exported. For anything else, email hello@siteremora.com. We respond within 30 days, or sooner where the law requires, and we may ask you to confirm that you control the store or the email address concerned.

If you are a California resident: we do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that require a right to limit. We will not discriminate against you for exercising your rights.

If you are in the European Economic Area or the United Kingdom: our lawful bases are performance of our contract with you (providing the Service); our legitimate interests in securing and improving the Service and telling businesses about our product; your consent, for Google Analytics on this website; and compliance with legal obligations. We do not make decisions about you by automated means that produce legal or similarly significant effects.

10. Cookies

Inside the Shopify admin, the app uses Shopify's session tokens to know which store you are working in, and it sets no analytics or advertising cookies.

On this website:

• Google Analytics (_ga and _ga_ followed by our measurement ID) measures how the site is used, for up to two years. If you are in the European Economic Area, the United Kingdom or Switzerland, it runs only after you choose Allow in the cookie banner. Elsewhere it runs unless you decline. Change your choice at any time under Cookie Settings at the bottom of every page; declining stops Google Analytics and deletes its cookies.
• Necessary cookies. sr_region records for one day whether the cookie banner applies where you are. It holds only that answer, not your location. sr_consent remembers your choice for a year.

You can also block cookies in your browser or with an extension. The site works without them.

11. Children

The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, email hello@siteremora.com and we will delete it.

12. Changes to this policy

We may update this policy. The effective date at the top changes when we do, and for material changes we will notify merchants through the app or by email before they take effect. The current version is always at https://siteremora.com/privacy.

13. Contact

Hunni Development, maker of SiteRemora. Mailing address: 99 Wall Street #2084, New York, NY 10005, United States. Privacy questions and requests: hello@siteremora.com. Everything else: hello@siteremora.com. Merchants who need a data processing agreement can ask at the same address.