Salexa
Legal

Privacy policy

What Salexa collects when you use it, why, who processes it, and how it is deleted. In short: we only access products and files, we never access customers or orders, and we delete everything when you leave.

Effective date: November 3, 2026

1. Who we are

Salexa ("Salexa", "we", "us") is a Shopify app that audits product SEO and generates suggestions for SEO titles, meta descriptions, product descriptions and image alt text. Salexa is operated by Ilija Kocev, 1480 Gevgelija, North Macedonia.

This policy covers the Salexa app (app.salexa.app, used inside your Shopify admin) and this website (salexa.app). For data about your store's products, you, the merchant, decide what Salexa processes, and we process it on your behalf to provide the service.

2. Summary

  • We access your products and product images/files, and nothing else.
  • We never request access to customers or orders.
  • Product text and images are sent to OpenAI to generate suggestions when you ask Salexa to generate them.
  • Nothing is written to your store until you approve it.
  • When you uninstall, access stops immediately and all data we hold for your store is deleted 48 hours later.
  • We do not sell data, and this website uses no tracking or advertising cookies.

3. Data we access in your store

When you install Salexa, Shopify asks you to grant these permissions: read_products, write_products, read_files and write_files. With them, Salexa reads:

  • product titles, handles, status, vendor, product type, tags and options (such as size or colour);
  • product descriptions, SEO titles and meta descriptions;
  • product images and their alt text.

After your approval, Salexa updates only product descriptions, SEO titles, meta descriptions and image alt text.

Salexa does not request scopes for customers, orders, payments or staff, and cannot read that data.

4. Data we store

Data Why
Store domain (e.g. your-store.myshopify.com) and plan Identify your installation and apply plan limits.
Shopify access token (encrypted) Call the Shopify Admin API on your behalf.
Audit results: product IDs, titles, handles, scores and detected issues Show your SEO dashboard and product list.
Suggestions: the original and the proposed text, and your edits Let you review, approve or reject suggestions.
Change history: previous and new values of applied changes Let you revert any change with one click.
Brand voice settings you enter (tone, audience, examples, words to avoid, default language) Make suggestions match your style.
Usage counters (number of products processed, AI tokens used) Apply plan quotas and prevent abuse.
Technical logs (request path, status, timing, store domain) Operate, secure and troubleshoot the service. Logs do not contain access tokens or product content.

If you email us, we keep your message and contact details to answer you. We do not store your customers' personal data.

5. AI processing by OpenAI

Product data and images are sent to OpenAI for processing. When you ask Salexa to generate suggestions, we send the relevant product content (such as title, vendor, product type, tags, options, description, current SEO fields, product images and your brand voice settings) to OpenAI's API, which returns the suggested text.

  • We only send what is needed for the suggestion you requested.
  • We ask OpenAI not to store the responses for later retrieval, and we identify your store to OpenAI only by a one-way hashed identifier (never the store domain), which helps OpenAI detect abuse.
  • Under OpenAI's API data usage policies, data sent through the API is not used to train OpenAI's models by default. OpenAI may retain API inputs and outputs for a limited period to monitor for abuse, as described in its policies.
  • AI output is treated as a draft. It is checked, sanitized and only published to your store after you approve it.

See OpenAI's policies for details on how OpenAI handles API data.

6. How we use data

  • to provide the audit, suggestions, approvals, history and revert features;
  • to apply plan limits and bill through Shopify;
  • to keep the service secure, prevent abuse and fix problems;
  • to answer support requests.

We do not sell data, use it for advertising, or build profiles of you or your customers.

We process data to perform our contract with you (providing Salexa), for our legitimate interests in operating and securing the service, and to comply with legal obligations. Where Salexa processes personal data contained in your store content on your behalf, we act as your processor and follow your instructions given through the app.

8. Service providers

We share data only with providers that help us run Salexa:

Provider Purpose
Shopify Inc. The platform Salexa runs on; app installation and billing.
OpenAI, L.L.C. Generating SEO text and image alt text from product content.
Railway Corporation Application hosting, database and queue infrastructure.

We may disclose data if required by law or to protect the rights, safety and security of our users and the service.

9. Retention and deletion

  • We keep your store data while Salexa is installed.
  • When you uninstall, Salexa's access token is deleted immediately and pending work is cancelled.
  • 48 hours after uninstall, Shopify sends a data erasure request (shop/redact) and we permanently delete all data stored for your store.
  • Customer data requests and erasure requests (customers/data_request, customers/redact) are acknowledged; Salexa stores no customer data.
  • Support emails are kept for as long as needed to handle your request.

10. Security

Access tokens are encrypted with AES-256-GCM, all traffic uses HTTPS, every database query is restricted to your store, and all Shopify webhooks are verified by signature. Read more on our security page.

11. International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. To exercise them, email privacy@salexa.app. Uninstalling Salexa also triggers deletion of all store data as described above. You may also complain to your local data protection authority.

13. Cookies

This website does not use cookies, analytics or tracking. Inside your Shopify admin, Salexa authenticates with Shopify session tokens and does not set advertising or tracking cookies.

14. Children

Salexa is a business tool and is not intended for children.

15. Changes to this policy

We will update this page when our practices change and adjust the effective date above. For material changes we will notify merchants in the app or by email.

16. Contact

Privacy questions: privacy@salexa.app
General support: support@salexa.app
Ilija Kocev, 1480 Gevgelija, North Macedonia