Privacy Policy

1. Who We Are

SellBetter (“we,” “our,” or “us”) operates the SellBetter platform at sellbetter.pro. We provide automated Shopify store audits and AI-powered conversion rate optimization (CRO) recommendations.

For privacy questions, contact us at privacy@sellbetter.pro.

2. Data We Collect

When you use SellBetter, we collect the following information:

• Account information: Your email address and name, provided via Clerk (our authentication provider) when you sign up.
• Shopify store data (if you connect via Shopify OAuth): Your store domain, an encrypted Shopify access token, product titles and descriptions (read-only), product image metadata, script tag information, and theme name. We do not collect individual customer PII from your store.
• Public storefront data: We crawl your public Shopify storefront (exactly as Google would) to evaluate page structure, load speed, and conversion signals.
• Audit results and task history: Conversion scores, checklist results, AI-generated fix recommendations, and task completion records.
• Google Search Console data (if connected): Click and impression metrics, top queries, and top landing pages from your GSC property — 28-day rolling window.
• Subscription status: Your plan (Free, Pro, or Agency) and Stripe customer and subscription IDs. We never see or store your card details — all payment data is handled directly by Stripe.
• Usage data: Pages visited within the app, audit run timestamps, and task completion events. We do not use advertising or behavioural tracking cookies.

3. How We Use Your Data

• Running store audits: We analyze your public storefront and (if connected) your Shopify API data to produce a conversion score and checklist.
• AI-powered fix recommendations: Anonymized store content (no personally identifiable information) is sent to OpenAI to generate specific fix instructions. OpenAI does not use this data to train its models under our enterprise agreement.
• Weekly email digest: If enabled, we send a Monday morning summary of your score and top 5 fixes via Resend. You can unsubscribe at any time in Settings.
• Autopilot auto-fixes (Autopilot plan only): With your explicit consent, we use write permissions to apply approved fixes directly to your Shopify theme. This feature is opt-in and requires explicit per-fix approval.
• Account management: To process your subscription, send billing receipts, and provide customer support.

4. Data Storage and Security

All data is stored in Supabase (hosted on AWS). Your Shopify access token is encrypted at rest using AES-256-CBC before storage — only SellBetter servers can decrypt it. Your Google refresh token is similarly encrypted.

We use HTTPS for all data in transit. Our database enforces row-level security and is accessible only via service role credentials stored as server-side environment variables.

5. Third-Party Services

• Clerk — handles authentication (sign-up, sign-in, session management). Your password is never stored by SellBetter.
• Stripe — handles all payment processing. We never see or store card numbers, expiry dates, or CVV codes.
• OpenAI — receives anonymized store content (product titles, descriptions, identified issues) to generate fix instructions. No customer PII is included.
• Resend — delivers transactional and digest emails on our behalf.
• Google — if you connect Google Search Console, we request read-only access to your Search Console data via Google OAuth.

6. Cookies

We use session cookies for authentication and CSRF protection during OAuth flows (Shopify and Google). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Data Retention

We retain your data for as long as your account is active. If you uninstall the SellBetter Shopify app, we disconnect your store and clear your access token within 48 hours. If you delete your account, all store data, audit history, and personal information is permanently deleted within 30 days.

8. Your Rights

You have the right to:

• Access and export your data — contact privacy@sellbetter.pro.
• Delete your account and all associated data — go to Settings → Danger Zone → Delete my account, or email us.
• Revoke Shopify access — uninstall the app from your Shopify admin. Your access token is cleared immediately.
• Revoke Google access — disconnect from Settings or revoke via your Google account permissions page.
• Opt out of email communications — unsubscribe via the link in any email, or toggle off in Settings.

9. Children’s Privacy

SellBetter is not directed at children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of SellBetter after changes take effect constitutes your acceptance.

11. Contact

For privacy-related questions, data deletion requests, or to exercise your rights, contact us at privacy@sellbetter.pro.