ListSmith Privacy Policy

Last updated: June 24, 2026

ListSmith ("we", "the app") is an embedded Shopify admin app that generates and maintains product content (descriptions, SEO meta titles and descriptions, and image alt text) for merchant stores. This policy explains what data we access, why, and how we protect and delete it.

Data we access

• Product data via the read_products and write_products scopes: product titles, types, tags, descriptions, SEO fields, and product image references. We use this to generate content and detect duplicate/thin content, and to write approved changes back to your store.
• Shop and installation data: your shop domain and an offline access token (stored encrypted) used to perform the work you request.

We do not request or store customer personal information. We do not access orders, customers, or payment data.

How we use it

Product text is sent to AI providers to generate on-brand content and embeddings for similarity/de-duplication, only when you trigger generation or sync. Generated content is shown to you for review; nothing is written to your store until you approve it, and every change can be reverted.

Subprocessors

• Anthropic (Claude API) — content generation.
• Voyage AI — text embeddings for catalog similarity.
• Cloudflare — network ingress.

We do not sell your data or use it to train models.

Storage & retention

We store a per-shop cache of product text, embeddings, generated content versions, and your encrypted access token, used to provide the service. Access tokens are encrypted at rest. Data is isolated per shop.

Deletion & GDPR

We honor Shopify's mandatory compliance webhooks. On customers/data_request and customers/redact we confirm we hold no customer data. On shop/redact (sent after uninstall) we delete all data associated with your shop. Uninstalling the app revokes our access token.

Contact

Questions or data requests: [email protected].