Privacy policy
Effective date: October 23, 2026
Who we are
Autivis LLC, a Florida multi-member limited liability company, provides Autivis for Shopify merchants. This policy describes information handled through our app and related support, why we handle it, the providers involved and your choices.
For information processed on a merchant's instructions, the merchant is the controller or business and Autivis is its processor or service provider. Autivis separately handles its own business contacts, subscription administration and security information. Our Terms of Service govern the service. Our Data Processing Addendum governs processing on a merchant's behalf and prevails for a conflict about that processing.
Information and permissions
The public MVP covers Settings and Intake Sweep, with Governor included within Sweep. It uses shop identity, installation and connection state, product and variant information, product metadata, inventory and location information needed for the selected feature, app settings, schedules, activity controls and limited change records. Shopify supplies signed, short-lived staff-session information to authenticate authorized app users.
The app requests these Shopify permissions: read_inventory, read_locations, read_products and write_products. It does not request customer or order API access, customer contact fields or theme access for this MVP. Mandatory privacy requests may nevertheless contain shop and customer identifiers needed to identify and answer the request. We use those identifiers for privacy processing, not marketing or customer profiling.
We also handle information you choose to provide through supported features or support, including product content, photographs, instructions, business contact details and messages. Do not include unnecessary customer information, passwords, payment-card details, sensitive identity documents or regulated health or financial information. A feature advertised for a later release does not authorize additional access. Additional data flows require appropriate notice, permissions and any required approval before activation.
Why we process information
We process information to authenticate authorized users; provide selected product-intake features; prepare, apply and check instructed changes; maintain settings, activity controls and configured schedules; administer subscriptions and usage allowances; support merchants; protect the service; and fulfill privacy and legal duties. We do not sell personal information or use merchant or customer information for targeted advertising.
Where applicable, our legal bases include performing an agreement, legitimate interests in secure service operation, compliance with legal obligations and consent where required. Processing for a merchant follows its lawful instructions under the DPA. The merchant is responsible for the lawful basis and notices for its store operations.
AI and service providers
Enabled Intake/Sweep AI features send the product content and instructions needed for the requested operation to the merchant-connected OpenAI API and receive the resulting output. AI output can be inaccurate and should be reviewed. Autivis does not use merchant information to train its own generalized AI models, instruct providers to train generalized models on that information, or enable provider training or data-sharing opt-ins through the app.
You connect your own OpenAI API account using its API key. OpenAI bills API usage directly to you, separately from your Autivis subscription. Your provider agreement, account settings and provider retention rules also apply. Autivis does not represent that it can inspect or control every merchant account's settings. A successful connection test does not certify account-wide privacy settings or zero provider retention.
The provider inventory for this MVP is:
| Provider | Purpose and relationship |
|---|---|
| Google Cloud | Application hosting, PostgreSQL, object storage, managed credential encryption and logging for Autivis. |
| Shopify | Store data, signed authentication, app events and app-subscription billing; Shopify also operates under your separate Shopify agreement. |
| OpenAI API | AI inference through your connected API account; your separate provider agreement and settings apply as well as Autivis's duties for its own handling. |
Vertex AI, Document AI, Google Drive/Search Console, social publishing, mailbox, rendering and order-reporting integrations are outside this public MVP. Claude and Shopify Sidekick are not available v1 connections. Their presence in other plans or platform code does not mean this MVP sends your information to them.
Autivis's obligations for providers it engages include appropriate confidentiality, security, instruction limits and processing restrictions under the DPA. Material subprocessor changes follow the DPA's notice and objection provisions. Connecting an independently owned provider account does not transfer control of that account to Autivis or waive our responsibilities for our own processing.
Credentials and subscription information
Merchants authenticate to Shopify and connected services themselves. Autivis does not store connected-service passwords. Required API keys and access/session credentials must be encrypted, restricted to the applicable merchant and connection, and limited to necessary permissions and any applicable expiry. Disconnect or uninstall ends authorized connection access and requires deletion of the stored credentials within that installation's scope.
Shopify processes app-subscription payments. Autivis handles the subscription status, selected plan, trial, entitlement and usage information needed to operate the service, and does not collect payment-card details for Shopify app subscriptions. The approved monthly plans are USD $15 for 50, $39 for 500, $99 for 2,000 and $199 for 5,000 new products, with an eligible three-day trial. Allowances are hard caps; contact Autivis for larger needs. There are no automatic overage charges. The Terms and Shopify approval describe billing details; merchant OpenAI fees remain separate.
Retention, deletion and return
We use the shortest retention needed for the purpose. Our Terms and DPA require the following limits and actions:
- Operational logs: 30 days.
- Change and undo history: 90 days while installed.
- Shopify customer-redaction requests: fulfillment within 30 days.
- Shop data: erasure within 48 hours after receipt of Shopify's
shop/redactrequest. - Stored connection credentials: deletion on disconnect or uninstall within the applicable installation and connection scope.
Shopify ordinarily sends shop/redact 48 hours after uninstall. Our shop-data erasure period begins when we receive that request; it is separate from ending authorized access on uninstall. Mandatory privacy processing is independent of paid activities and is not paused merely because a business activity is OFF or a subscription is unpaid.
Only information subject to a specific legal retention duty may be retained beyond the applicable deletion period. It must remain protected, restricted to that duty and deleted when the duty ends. Backup restoration must not reintroduce erased merchant information. Completion records must be limited to the minimum identifiers, timestamps and counts needed to identify an installation and prevent restoration of erased information, without retaining the erased customer or product content.
These commitments apply to Autivis's copies and records; this notice does not grant an additional backup-retention exception. Uninstalling Autivis does not delete your live Shopify products or information already published to a separate platform; those platforms follow their own arrangements.
Privacy requests and rights
Customers should first contact the merchant responsible for their information. Autivis handles Shopify's customers/data_request, customers/redact and shop/redact requests. For an applicable data request, retained information is compiled for secure access by the authorized store owner. We verify identity and authority before disclosure; the merchant remains responsible for its direct response to the individual.
Depending on applicable law, individuals may request access, correction, deletion, restriction or portability, object to processing, withdraw consent without affecting earlier lawful processing, and complain to a privacy regulator. Contact us using the details below. You may also disconnect optional services or uninstall the app. We do not penalize you for exercising a legal privacy right.
Security and international processing
Our service commitments require encrypted transport, managed encryption for stored credentials, authenticated and scoped access, tenant and installation boundaries, restricted operational access and appropriate confidentiality. We investigate security incidents and provide notices required by law, Shopify agreements and the DPA. No service can guarantee absolute security.
Information may be processed in the United States and other locations where the applicable providers operate. We do not promise that all processing stays in one country. Where a restricted transfer requires a safeguard, the required lawful arrangement and applicable supporting measures must be established before that transfer. This policy does not itself execute standard contractual clauses, certify a provider's transfer status or establish that an account-specific transfer arrangement has been completed.
Customer tracking on a merchant's storefront is outside this MVP. Autivis is intended for authorized business users and is not directed to children. We will update this notice before introducing a feature that materially changes the described processing.
Changes and contact
We publish updates with a revised effective date and give notice of material changes through the app or our business contact channels as required.
For privacy requests, support or a suspected security issue, contact Autivis LLC at autivis@gmail.com or 954-903-8385. Do not send passwords, API keys or unnecessary customer information. Mailing address: 5645 Coral Ridge Dr, Suite 427, Coral Springs, FL 33065, United States. Website: autivis.com.