Privacy policy

What Taxo can access

Taxo requests two permissions from your store: permission to read your products, and permission to update them. Nothing else is requested, and nothing else can therefore be reached.

In particular, Taxo has no access to your customers, your orders, your payment details, your staff accounts, or your storefront visitors. These permissions are granted by Shopify at install time and are visible on the install screen before you accept them.

What Taxo stores

Taxo stores the access token Shopify issues for your store, your app settings, a record of each run and of each product processed in it, and a record of the usage reported to Shopify for billing.

For each product it processes, Taxo keeps its Shopify identifier, the category it suggested, a confidence value, and a fingerprint of the product content it read. The fingerprint exists so that an unchanged product is not paid for twice.

Taxo also keeps what you answered during the app's introduction, the display language you picked, and the sample of your own products it read to show you what it would change. The answers decide which explanation you are shown first; they are not settings, and they change nothing about what Taxo does to your catalogue.

Taxo does not store product images, and it does not build a copy of your catalogue.

Sending product information to an AI provider

To propose a category, Taxo sends a product's title, description, type, vendor, tags and, where available, one product image to Google's Gemini API. Google receives this for that purpose alone. Apart from the one-time attribution call described in the next section, no other third party receives any of your data.

This information is sent as part of the request and is not used by Taxo to train any model. Google's handling of API requests is governed by its own terms for the Gemini API.

No customer information is sent, because Taxo never has access to any.

Telling our affiliate network that you installed

Taxo is listed on Shoffi, an affiliate network through which partners recommend Shopify apps. The first time you open Taxo after installing it, Taxo sends Shoffi your store's domain, Taxo's own app identifier, and the IP address of the browser you opened it from. Shoffi uses the IP address to work out whether a partner's recommendation led to your install, so that the partner can be paid. This is sent once per install and never again.

An IP address can be personal data. It is sent for this purpose only, on the basis of our legitimate interest in paying the partners who recommend Taxo, and Taxo does not keep it. Shoffi's handling of it is governed by Shoffi's own privacy policy. If you object to this, write to the support address below and we will ask Shoffi to erase the record for your store.

What Taxo writes back to your store

When you start a run, Taxo writes the product category to each product the run covers, and a small marker recording that it did so. It changes nothing else: not your titles, descriptions, prices, inventory, or images.

Outside a run you start yourself, nothing is written unless you have explicitly turned on the automatic categorisation of new products, or the automatic re-check when Shopify updates its taxonomy, in the app settings. Both are off unless you switch them on, and both stop at the monthly limit you set.

When you uninstall

Uninstalling revokes Taxo's access to your store immediately. Your session is deleted at that point.

Shopify then sends a shop data deletion request, normally 48 hours later. On receiving it, Taxo deletes your settings, your runs and their per-product records, your product fingerprints, the stored sample of your products, and your introduction answers and language choice.

Records of usage already reported to Shopify for billing are kept, because they are the accounting record of charges that have been made; usage that was never reported to Shopify is deleted with the rest, along with the running totals. They contain no personal data.

Customer data requests

Shopify requires every app to answer requests to view or delete a customer's data. Taxo answers that it holds none, which is accurate: it has never had permission to read customer information.

Where data is held

Taxo runs on servers in Amsterdam, in the European Union, and its database is hosted in the same region.

Contact

For any question about this policy or about the data Taxo holds for your store, write to the support address shown on the app's listing.