Privacy Policy

1. Introduction

This Privacy Policy describes how PDP Pulse ("we", "us", or "our", operated by RedArrow LTD) collects, stores, and processes information when you install and use our Shopify application through the Shopify App Store.

We value your privacy and the trust of your customers. Our services are designed in strict accordance with the Shopify Partner Program Agreement, Shopify API License and Terms of Use, GDPR, and the California Consumer Privacy Act (CCPA).

2. Information We Collect

When you install PDP Pulse on your Shopify store, we automatically collect certain information from your Shopify account pursuant to the permissions you grant us:

• Merchant Account Information: Your store domain (e.g. store.myshopify.com), primary email address, store currency, and timezone.
• Product & Catalog Data: In order to answer shopper inquiries, our application reads product titles, descriptions, pricing, inventory availability, tags, and product metafields via the Shopify GraphQL / REST API (read_products, read_metaobjects, read_themes).
• Chat Session Queries: When a shopper on your storefront interacts with the PDP Pulse chat assistant, their typed queries and the AI assistant's generated responses are recorded so that you can view conversation history and analyze customer demand in your admin panel.

3. How We Use Information

We use the data we collect solely to provide and improve our services:

• To enable the AI shopping assistant to provide accurate answers about your store’s products.
• To generate merchant analytics (such as top inquired products and conversation volume).
• To authenticate store sessions and bill subscription fees through Shopify's Billing API.
• To provide technical merchant support and troubleshoot app issues.

4. Third-Party AI Providers (Subprocessors)

PDP Pulse utilizes advanced Large Language Model (LLM) APIs to generate conversational responses. When a visitor asks a question, the relevant product details and question text are sent securely to the AI provider configured by the merchant:

• Google LLC (Gemini API)
• Anthropic PBC (Claude API)
• OpenAI, Inc. (GPT API)

In accordance with enterprise API policies, prompt data transmitted via API is not used by these providers to train their foundational models.

5. Data Retention & Mandatory Shopify Webhooks

We retain your store's configuration, synced product catalog, and chat logs only for as long as you maintain the application installed on your Shopify store.

PDP Pulse fully supports Shopify's mandatory GDPR compliance webhooks:

• customers/data_request: View any customer-specific data held upon request.
• customers/redact: Purges all customer-identifiable conversation sessions within 30 days of receiving a verified request.
• shop/redact: When an app uninstall occurs or when Shopify sends a shop redaction webhook, all store products, settings, API credentials, and logs are permanently deleted within 48 hours.

6. Security Measures

All data transmission between your Shopify store, our application servers, and AI providers occurs over encrypted TLS/HTTPS connections. API secrets and tokens are encrypted at rest.

7. Contact Information

If you have questions about this Privacy Policy or wish to submit a data erasure request, please contact our Data Protection Officer at: