Hotspot AI Privacy Policy

Last Updated: October 2026

Hotspot AI (“we”, “us”, “our”, or “the App”) is developed by Magneto IT Solutions LLC. We provide an interactive visual diagram and hotspot editor allowing Shopify merchants to create shoppable banners, collection diagrams, and visual spare parts hotspots linked to products on Shopify storefronts (“the Service”).

This Privacy Policy describes how we collect, process, and protect your information when you install or use the App in connection with your Shopify-supported store.

Important note: This policy applies to merchants and their authorized staff who install and configure the App. The App does not collect, track, or store personal identifiable information (PII) from your store’s end customers or visitors.

1. Information the App Collects

When you install Hotspot AI, we access specific types of data from your Shopify account via Shopify’s authorized Admin APIs to provide the core functionality:

• Shop & Merchant Account Details: Your Shopify store domain (e.g. store.myshopify.com), store name, merchant email address, primary country/locale, and timezone to manage authentication, installation, and account support.
• Shopify Products & Collections API: Product titles, handles, IDs, SKUs, variants, pricing, product types, and assigned collection names. This information is needed to allow you to link hotspot markers directly to products and display catalog parts on diagrams.
• Shopify Files & Images API: Banner images, assembly diagrams, and graphical assets you upload or select for hotspot placement.
• Shopify Metafields: Storing published hotspot coordinates, pins, and diagram configuration data in your store metafields (hotspot_ai namespace) to ensure zero-latency storefront rendering.

No End-Customer / Buyer PII Collected

The App operates on storefronts through Shopify Theme App Embeds. When shoppers view your diagrams or click hotspots, the App renders markers and product cards using the merchant’s configured product data. We do not collect customer names, phone numbers, physical addresses, payment information, or buyer tracking cookies.

Logs and Admin Interface Technologies

When merchants access the App’s admin interface within Shopify Admin:

• Session Cookies: Used strictly for authentication and keeping you logged in securely via Shopify App Bridge.
• Server Logs: Technical logs (such as IP addresses, browser user agent, API response times, and error traces) used strictly for performance monitoring, debugging, and security verification.

2. How We Use Collected Information

We process the collected information solely to provide, operate, and maintain the Service, specifically to:

• Authenticate your store and maintain an authorized offline Shopify session.
• Enable you to upload diagram images, place pins, and map products to hotspots.
• Process image scans using automated computer vision and AI models to detect part coordinates and suggest hotspot placements on uploaded diagrams.
• Sync your product catalog and collection names for rapid search and hotspot tagging.
• Publish and persist hotspot data into Shopify metafields for storefront display.
• Respond to support tickets, inquiries, and provide customer assistance.
• Prevent fraud, secure the application, and diagnose technical issues.

3. AI Processing & Diagram Scanning

When you use the AI hotspot detection feature, the uploaded diagram image and non-sensitive product metadata (such as part titles and SKUs) are processed through our AI backend service to detect coordinates and pointer targets. This data is used solely to generate suggested hotspot locations for your store and is never shared publicly or used to train third-party public AI models.

4. Information Sharing & Third Parties

We respect your privacy and do not sell, rent, trade, or monetize your data. We do not engage in behavioral advertising or user profiling.

We share information only with trusted third-party service providers necessary to operate our service:

• Cloud Hosting & Database Infrastructure: Secure cloud providers (such as AWS, DigitalOcean, or Cloudflare) that host our encrypted databases and server runtime.
• Legal & Compliance: If required by applicable law, court order, or governmental authority to protect our rights, prevent fraud, or investigate violations.

5. Data Retention & Deletion

We retain your store configuration, diagram assets, and hotspot definitions only for as long as you have the App installed on your Shopify store.

• App Uninstallation: When you uninstall Hotspot AI from your Shopify store, our system immediately receives the app/uninstalled webhook. Your access token is invalidated, the store is deactivated, and all associated stored configurations are purged from our operational databases within 48 hours to 30 days.
• GDPR & Mandatory Webhooks: We fully comply with Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact). When a shop/redact request is received, any remaining store data is permanently deleted.

6. Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (including the European Economic Area, the United Kingdom, and California), you have rights regarding your personal information, including:

• The right to access the personal information we hold about you.
• The right to request rectification of inaccurate data.
• The right to request complete erasure/deletion of your personal data.
• The right to restrict or object to the processing of your data.
• The right to data portability.

To exercise any of these rights, please contact us at the email address provided below. We respond to all verified requests within thirty (30) days.

7. International Transfers

Your information may be transferred to and maintained on secure servers located outside of your state, province, or country (such as the United States and Canada) where data protection laws may differ. We implement appropriate technical, contractual, and organizational safeguards to ensure your data is treated securely.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any revisions will be published on this page with an updated "Last Updated" date. Significant changes will be communicated via the App or your registered merchant contact email.

9. Contact Us

If you have any questions, comments, or data deletion requests regarding this Privacy Policy or our privacy practices, please contact us: