Privacy policy for the Deliberate Studio app.

This policy covers the Deliberate Studio app distributed through the Shopify App Store, made by Deliberate Studio, Inc. Installing the app creates your store's own Deliberate workspace, where a team of AI agents works from your store's data. Each store's workspace is kept separate from every other store's.

For workspaces created once the app began asking for App Terms acceptance (October 2026), installing the app reads your store's name, contact email and Shopify plan (and the name and email Shopify gives for the person who signs in) to set up your workspace, stores the connection to your store, and registers the uninstall and billing webhooks; it reads no orders, products, inventory or customers yet. Once an owner or admin of your workspace accepts the App Terms for your company, we read your recent store data (about the last 30 days of orders, plus your catalog and inventory) so the workspace is useful right away, and keep it up to date while the app is installed. When an owner or admin accepts the App Terms, we record their name, title, email, Shopify user ID, IP address and browser, and the company name they enter, and keep that record to show the terms were accepted, including after the shop's data is deleted.

Our practices for the rest of our products and this website are described in our general privacy policy. The commitments there apply here too: we don't sell data, the AI model providers we use don't train their models on your data, and we don't benchmark across customers without explicit permission.

What the app accesses

Through Shopify OAuth, with the scopes you approve at install time:

• Orders and fulfillment — order history (including orders older than 60 days, where Shopify has approved that access), line items, totals, shipping details, returns
• Products and inventory — products, variants, inventory levels, cost-per-item, metafields
• Discounts — codes, usage, rules
• Customer aggregates — per-customer order count, total spent, and first-order date, used for lifetime value and repeat-purchase analytics
• Customer contact details — name, email, address, and phone, where Shopify has approved protected customer data access. Read from the Shopify API on demand when your authorized team looks up a customer's orders or returns to resolve a support question, and displayed in the moment. We do not build or retain a store of individual customer records; long-term we keep aggregates only.
• Shop settings and content — locations, policies, pages, files, and theme content, used for storefront analysis and content work

What the app writes

Where your team uses those features, and always visible in your Shopify admin:

• Discount codes — created and managed as part of promotions your team runs
• Draft orders — for gifting and creator programs
• Product SEO fields, content pages, and files — content operations your team reviews
• Inventory item cost — keeping cost-of-goods data accurate for margin reporting

Agents propose changes for your team to review; some actions run automatically within settings you turn on.

Why

Only to run your workspace: revenue, LTV, and cohort analytics; order and returns operations; discount management; content operations; and the answers, drafts, and reports your agents produce for you. Nothing else.

Storage and retention

• API credentials — a managed secrets service on Google Cloud, encrypted at rest.
• Analytics and agent output — Google Cloud, encrypted at rest.
• In transit — TLS everywhere.

We keep data while the app is installed. Uninstalling suspends your workspace and ends our access to your store right away. Reinstalling within about two days brings the workspace back. When Shopify sends its shop/redact notice (about 48 hours after an uninstall), we delete the workspace and everything in it (store data, agent output, and stored credentials) within 30 days, except as noted below. You can ask us to delete your data any time at support@deliberatestudio.com.

Shopify privacy webhooks

• customers/data_request — we provide whatever per-customer data we hold within 30 days. Because contact details are read on demand rather than stored, this is usually limited to customer-level aggregates and any support notes your team attached.
• customers/redact — we delete data tied to that customer within 30 days: aggregates keyed to them and any notes referencing them.
• shop/redact — we delete all data associated with the shop within 30 days of receipt, except copies in routine backups until they are overwritten and records we must keep by law, billing records, and the record that the shop accepted our App Terms.

Access and subprocessors

Your workspace is visible to the people you sign in or invite. Deliberate staff access it only to support you, keep the service running, or meet a legal obligation. We rely on a small set of subprocessors described in our general privacy policy: cloud infrastructure (Google Cloud, Cloudflare) and AI model providers (such as Anthropic and Google), whose terms prohibit them from training their models on your data. We do not sell or share data with advertisers or data brokers.

Your rights

You can ask for a copy or deletion of the data we hold, or uninstall the app to end our access. If a data protection law that applies to you and to us gives you further rights, we'll respond as that law requires. Contact hi@deliberatestudio.com.