This Policy explains what we collect, how we use it, and the choices you have.
This Privacy Policy describes how StoreXray ("we," "us," "our"), a sole proprietorship based in California, collects, uses, and shares information when you use getstorexray.com and purchase a StoreXray audit. By using the Service, you agree to this Policy.
1. Information we collect
Information you provide
- Email address — to deliver your Audit and to respond to support and refund requests.
- Store URL — the Shopify store you ask us to analyze.
- Payment information — processed directly by our payment processor, Stripe. We receive confirmation of payment and limited details (such as billing email and card last four digits); we do not collect or store full payment-card numbers.
- Correspondence — anything you include when you contact us.
Information collected automatically
- Limited technical and log data (such as IP address and request metadata) needed to operate and secure the Site and Service.
- If we use analytics, we use privacy-respecting, aggregate analytics that do not build advertising profiles or track you across other websites.
We do not require you to create an account, and we do not request sensitive personal information.
2. How your Audit is produced (automated & AI processing)
To generate your Audit, the store URL you submit and publicly available information from that store are processed by automated systems and third-party artificial-intelligence providers (including Anthropic). This processing is necessary to provide the Service you purchase.
3. How we use information
We use information to: provide and deliver the Audit; process your payment; respond to support and refund requests; detect, prevent, and address fraud or abuse; operate, maintain, and improve the Service; and comply with our legal obligations.
4. How we share information
We share information only with service providers ("subprocessors") that help us run the Service, under agreements that limit their use of it:
- Stripe — payment processing
- Resend — transactional email delivery
- Anthropic — AI processing used to generate the Audit
- Cloudflare — Site hosting, DNS, and security
- Hetzner — server hosting for the audit pipeline
- Google PageSpeed Insights — performance metrics (where used)
We may also disclose information if required by law or to protect our rights, and in connection with a business transfer. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. Data retention
We retain your email, store URL, and generated Audit for as long as needed to deliver the Service, provide support, and honor refunds, and as required for our legal, tax, and accounting obligations. We delete or de-identify information when it is no longer needed for these purposes. You may request deletion as described below.
6. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit and restricted access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your privacy rights
California residents (CCPA/CPRA)
You have the right to know and access the personal information we collect, to request its deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or share your personal information for advertising, and we do not collect sensitive personal information. To exercise these rights, email support@getstorexray.com; we may need to verify your request.
EEA / UK residents (GDPR)
Where applicable, our legal bases for processing are performance of our contract with you (delivering the Audit), our legitimate interests (operating and securing the Service), and your consent where required. You have rights to access, correct, delete, restrict, port, and object to processing, and to lodge a complaint with your local data-protection authority.
8. International data transfers
We operate in the United States, and your information will be processed in the U.S. and in other countries where our subprocessors operate. Where required, we rely on appropriate safeguards for such transfers.
9. Children
The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
10. Cookies
The Site uses only the minimal cookies needed for its operation and does not use cross-site advertising trackers. If we add analytics, we will use a privacy-respecting tool that does not profile you.
11. Changes to this Policy
We may update this Policy from time to time. Material changes are reflected by updating the "Effective date" above.
12. Contact
Privacy questions or requests: support@getstorexray.com
StoreXray, a California sole proprietorship, USA
18543 Devonshire Street #1019, Northridge, CA 91324