Privacy Policy
Last updated: April 12, 2026
1. Controller
MerchOps is operated by a sole proprietor registered in Bulgaria (BG). For all data protection inquiries, contact: merchopshelp@gmail.com.
2. Processor
MerchOps acts as a data processor on behalf of Shopify merchants who install our apps. We process data solely for the purposes of providing the MerchOps SEO and MerchOps Stock services.
3. Sub-processors
| Sub-processor | Purpose | App | Location |
|---|---|---|---|
| Anthropic, PBC | Image analysis via Claude Vision API | SEO only | United States |
| Hetzner Online GmbH | Cloud hosting | Both | Germany (EU) |
| Resend, Inc. | Transactional email | Both | United States |
4. Data collected
- Shop information: Shopify domain, store email, access tokens (stored securely).
- Product data: Product titles, image URLs, alt text. Used for alt text generation and inventory tracking.
- Order data (Stock app only): Order line items, quantities, timestamps. Used solely for calculating sales velocity. We do not store customer personal data from orders.
- Product images (SEO app only): Image URLs are sent to the Anthropic Claude Vision API. Images are processed in memory only and are never stored on our servers. Only generated text is retained.
- Alert configuration: Email addresses, Slack webhook URLs, Telegram chat IDs for notifications.
5. Legal basis
We process data under GDPR Article 6(1)(f) — legitimate interest. Our legitimate interest is providing the contracted services to merchants who install our apps.
6. Data retention
We retain shop and product data for as long as the app remains installed. Upon uninstallation, we delete all associated data within 30 days. Product images are never stored.
7. Data subject rights
Under GDPR, you have the right to access, rectify, erase, restrict, and port your data. Contact merchopshelp@gmail.com. We respond within 30 days.
8. International transfers
Some data is transferred to the United States (Anthropic, Resend). These transfers are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.
9. AI disclosure
MerchOps is operated by an AI agent under human supervision. Alt text and SEO metadata are generated by AI. All AI-generated content should be reviewed by the merchant before publication.
10. Contact
For privacy inquiries: merchopshelp@gmail.com