Privacy Policy

Last updated: October 3, 2025

Obsess AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content marketing platform for Shopify stores.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our services.

1. Information We Collect

1.1 Information You Provide

Account information (name, email address, company name)
Shopify store information and credentials for integration
Payment and billing information
Content preferences and brand guidelines
Communications with our support team

1.2 Information Automatically Collected

Usage data (features used, content generated, frequency of use)
Device and browser information
IP address and location data
Cookies and similar tracking technologies
Analytics data about your store's performance

1.3 Information from Your Shopify Store

Product catalog information
Store metadata and configurations
Existing blog content (for analysis only)
Sales and traffic data (anonymized)

2. How We Use Your Information

We use the collected information to:

Provide and maintain our AI content generation services
Generate personalized content for your Shopify store
Optimize content recommendations based on your products
Process transactions and manage subscriptions
Send administrative information and updates
Respond to inquiries and provide customer support
Monitor and analyze usage patterns to improve our services
Detect and prevent fraud or technical issues
Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following situations:

Service Providers

We share data with third-party vendors who assist in operating our platform, including:

OpenAI (for AI content generation)
Stripe (for payment processing)
Amazon Web Services (for hosting)
SendGrid (for email communications)

Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement industry-standard security measures to protect your data:

256-bit SSL encryption for data transmission
Encrypted storage of sensitive information
Regular security audits and vulnerability assessments
Access controls and authentication requirements
Employee training on data protection
Compliance with SOC 2 Type II standards

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

Account data: Retained while your account is active
Generated content: Stored for your access unless deleted by you
Transaction records: Kept for 7 years for tax and legal compliance
Analytics data: Aggregated and anonymized after 90 days

Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

Access your personal information
Update or correct inaccuracies
Delete your account and associated data
Export your data in a portable format
Opt-out of marketing communications

6.2 GDPR Rights (EU Residents)

If you are in the European Economic Area, you additionally have the right to:

Object to processing of your personal data
Request restriction of processing
Data portability
Withdraw consent at any time
Lodge a complaint with a supervisory authority

6.3 CCPA Rights (California Residents)

California residents have the right to:

Know what personal information is collected
Know whether personal information is sold or disclosed
Say no to the sale of personal information
Access personal information
Request deletion of personal information
Equal service and price, even if you exercise your privacy rights

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Maintain your session and authentication
Remember your preferences and settings
Analyze usage patterns and improve our services
Deliver targeted marketing (with your consent)

Managing Cookies: You can control cookies through your browser settings. Disabling cookies may limit functionality of our services.

8. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected information from a child under 18, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws than your jurisdiction. By using our services, you consent to such transfers. We ensure appropriate safeguards are in place through:

Standard Contractual Clauses approved by the European Commission
Privacy Shield certification (where applicable)
Adequate security measures as described in this policy

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or through our platform.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Obsess AI Privacy Team

Email: privacy@obsessai.com

Support: support@obsessai.com

Address: [Your Company Address]

Data Protection Officer:
Email: dpo@obsessai.com

13. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

Contract: Processing necessary to fulfill our service agreement with you
Legitimate Interests: Processing for business operations, fraud prevention, and service improvement
Consent: Processing based on your explicit consent (e.g., marketing communications)
Legal Obligations: Processing required by law