Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: [EFFECTIVE DATE]

⚠ Template / v1.0 — pending legal review. Replace the bracketed placeholders ([COMPANY LEGAL NAME], [CONTACT EMAIL], [GOVERNING STATE], [EFFECTIVE DATE]) before launch.

This Privacy Policy explains how [COMPANY LEGAL NAME] ("Menaks", "we", "us") collects, uses, and protects information when you use the Menaks landing-page generator and related services (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

Account information — the email address you register with and a securely hashed password. We never store your password in plain text.
Shopify store data — when you connect a store via OAuth, we receive an access token and access the store resources you authorize (themes, products) solely to generate and publish landing pages at your request.
Content you generate — the product URLs, notes, and the landing-page content produced for you, kept in your account history.
Usage and cost logs — generation timestamps, status, and AI processing cost, used for your history view and our billing/operations.
Session cookies — a single HttpOnly session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

2. How we use your information

To provide, operate, and improve the Service.
To generate landing-page content and publish it to the Shopify store you connect.
To authenticate you, secure your account, and send transactional emails (e.g. password reset).
To monitor performance, prevent abuse, and meet legal obligations.

3. Third-party services

We share the minimum necessary data with service providers that help us run the Service:

Shopify — to read/write the store resources you authorize.
AI text providers (e.g. via OpenRouter) — product information is sent to generate marketing copy.
Email provider (Resend) — to send transactional emails.
Payment processor (Stripe, for paid plans where applicable) — to process subscriptions. We do not store full card details.

We do not sell your personal information.

4. Data storage and security

Data is stored on our managed infrastructure. Shopify access tokens are encrypted at rest (AES-based, Fernet). Access is restricted and transmitted over HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

5. Data retention

We retain account and generation history while your account is active. When you disconnect a store, its access token is deleted. You may request deletion of your account and associated data at any time (see "Your rights" below).

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, email [CONTACT EMAIL]. We will respond within a reasonable timeframe.

7. Shopify data and uninstalling

Disconnecting a store from your Menaks dashboard deactivates the connection and removes the stored access token. Uninstalling the app from your Shopify admin revokes our access. Generated content already published to your store remains under your control.

8. International users

The Service is operated from the United States. By using it, you understand your information may be processed in the United States and other countries where our providers operate.

9. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice within the Service.

11. Contact

Questions about this Policy? Contact [COMPANY LEGAL NAME] at [CONTACT EMAIL].