Privacy Policy for MatrixFit Recommender

Introduction

MatrixFit Recommender ("we," "our," or "the App") is a Shopify application that helps apparel merchants reduce returns by providing size recommendations to shoppers. This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

By installing and using MatrixFit Recommender, you agree to the terms outlined in this Privacy Policy.

1. Information We Collect

1.1 Information from Merchants (Store Owners)

When you install MatrixFit Recommender, we collect:

• Store Information: Store name, email address, Shopify domain, and store owner details
• Product Data: Product titles, descriptions, variants, images, and metadata (including size matrices you upload)
• Usage Data: How you interact with our App (e.g., matrices created, products assigned, analytics viewed)
• Authentication Data: OAuth tokens to access your Shopify store (encrypted and stored securely)

1.2 Information from Shoppers (End Users)

When shoppers use the size finder widget on your store, we collect:

• Measurement Data: Two body measurements entered by the shopper (e.g., bust and waist measurements in cm or inches)
• Session Information: Anonymous session ID, browser type, device type, timestamp
• Interaction Data: Widget opens, form submissions, size recommendations shown, add-to-cart actions
• Product Information: Which products shoppers are viewing when they use the size finder

Important: We do NOT collect personal identifying information (name, email, address), payment information, or IP addresses (beyond what's temporarily logged by our hosting provider).

1.3 Automatically Collected Information

• Analytics Data: We use aggregated, anonymized analytics to track app performance
• Technical Data: Browser type, device type, operating system (for compatibility and performance optimization)

2. How We Use Your Information

2.1 Merchant Data

We use merchant data to provide and operate the App's functionality, display analytics dashboards, improve our services, provide customer support, send important updates, and comply with legal obligations.

2.2 Shopper Data

We use shopper data to generate real-time size recommendations, track recommendation accuracy for merchant analytics, improve recommendation algorithms, and aggregate usage statistics (no individual shopper tracking).

2.3 Legal Basis for Processing (GDPR)

For users in the EEA, UK, or Switzerland: processing is based on contractual necessity, legitimate interests, and consent where required.

3. Data Storage and Retention

• Merchant Data: Retained while your store has the App installed, plus 30 days after uninstallation
• Shopper Analytics Data: Anonymized analytics data is retained for 90 days, then automatically deleted
• Recommendation Events: Individual shopper measurement data is deleted after 90 days
• Aggregated Statistics: De-identified, aggregated data may be retained indefinitely for service improvement

Data is primarily stored in secure databases in data centers located in the United States. Size matrices are stored in your Shopify store's metafields (you retain control).

4. Data Sharing and Disclosure

We do NOT sell, rent, or trade any personal information or shopper data to third parties.

We may share data with trusted service providers (Shopify, hosting providers, analytics services) who are contractually obligated to protect your data. We may disclose information if required by law.

5. Your Rights and Choices

• Access: Request a copy of the data we hold about you
• Portability: Receive your data in a structured, machine-readable format
• Update: Modify your store information and matrices directly in the App
• Delete: Remove matrices, products, or uninstall the App to delete your data

Under GDPR, you have additional rights including right to erasure, restriction, objection, withdrawal of consent, and the right to lodge a complaint with your local data protection authority.

To exercise these rights, contact us at: support@labs.appscout.io

6. Data Security

We implement industry-standard security measures: TLS 1.2+ encryption, OAuth 2.0 authentication, role-based access controls, continuous monitoring, and regular security audits.

In the event of a data breach, we will notify affected users within 72 hours and report to relevant authorities as required by law.

7. Cookies and Tracking

We use essential first-party cookies only (session state, user preferences). We do NOT use third-party advertising cookies, cross-site tracking, or social media pixels.

8. Children's Privacy

MatrixFit Recommender is not intended for use by individuals under 16. We do not knowingly collect personal information from children.

9. International Data Transfers

If located outside the US, your data may be transferred to and processed in the US. We use EU-approved Standard Contractual Clauses and rely on adequacy decisions where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Major changes will be communicated via email and in-app notice. Minor changes will be reflected in the "Last Updated" date.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

MatrixFit Recommender Support
Email: support@labs.appscout.io
Website: https://matrixfit.labs.appscout.io
Company: AppScout Labs
DPO: dpo@labs.appscout.io