Privacy Policy

Effective date: February 10, 2026

EditPilot ("we," "our," or "us") operates the EditPilot application available through the Shopify App Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you install and use our application. This policy is designed to comply with the Swiss Federal Act on Data Protection (FADP/nDSG) and the EU General Data Protection Regulation (GDPR) where applicable.

1. Data Controller

The data controller responsible for processing your data is:

EditPilot
Switzerland
support@editpilot.app

2. Information We Collect

Information provided through Shopify

When you install EditPilot, we receive access to certain data from your Shopify store as authorized through Shopify's OAuth process, including:

• Store name, domain, and contact email
• Product data (titles, descriptions, prices, tags, variants, inventory, and other product fields)
• Staff account information (name and email of the installing user)

Information generated through use

• Task configurations and execution history
• AI command prompts you submit
• Application usage logs and performance data

3. Legal Basis for Processing

We process your data based on the following legal grounds:

• Contract performance: Processing necessary to provide the EditPilot service you have requested by installing the app
• Legitimate interest: Processing necessary for security monitoring, fraud prevention, and service improvement
• Consent: Where required by applicable law, for example when processing AI command prompts through third-party providers

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the EditPilot application
• Execute bulk editing tasks and scheduled operations on your behalf
• Process AI commands and generate task configurations
• Maintain task history and enable rollback functionality
• Send transactional communications related to your account or tasks
• Monitor and improve application security and performance

5. Data Retention

We retain your data for as long as your EditPilot installation is active. Task history and execution logs are retained according to your subscription plan (1 day for Basic, 30 days for Advanced, 180 days for Professional).

When you uninstall EditPilot, we delete your store data and task history within 30 days. We may retain anonymized usage data for analytics purposes. Data required for legal compliance, accounting, or fraud prevention may be retained for the legally required period under Swiss law.

6. Third-Party Services

EditPilot uses the following categories of third-party services:

• Shopify — Platform integration and data access, governed by Shopify's Privacy Policy
• AI providers (Anthropic) — To process natural-language commands into task configurations. AI command prompts and relevant product context are sent for processing. We do not use your product data to train AI models.
• Cloudflare — Hosting, data storage, and task execution infrastructure

These service providers may process data outside of Switzerland and the EEA. Where this is the case, we ensure appropriate safeguards are in place in accordance with the FADP and GDPR, including standard contractual clauses where applicable.

7. International Data Transfers

Your data may be transferred to and processed in countries outside Switzerland, including the United States (where our infrastructure and AI providers operate). We ensure that such transfers are protected by appropriate safeguards as required by the FADP, including reliance on jurisdictions with adequate data protection levels as determined by the Swiss Federal Council, or standard contractual clauses approved by the European Commission.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS)
• Secure authentication via Shopify's OAuth framework
• Access controls and logging for internal systems
• Regular security reviews

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Under the Swiss FADP and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing activities
• Request data portability
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact us at support@editpilot.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the relevant supervisory authority in your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of EditPilot after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices:

EditPilot
Switzerland
support@editpilot.app