This policy explains what Discoverly collects when you install it on your Shopify store, why, where your data is processed, and the choices you have. We collect the minimum needed to score and improve your store's AI visibility — nothing more.
Last updated 14 July 2026 · Version 1.1 · Effective on install
01
Discoverly is a GEO/AEO optimization app for Shopify, operated by Vidgenix Limited (“Discoverly”, “we”, “us”), registered at Unit 1406B, 14/F, The Belgian Bank Building, Nos. 721–725 Nathan Road, Mong Kok, Kowloon, Hong Kong. For anything in this policy — including data-access and deletion requests — reach us at liu_ky@hisuntech.com. We are the controller of the store and account data described below; for the personal data of your shoppers that lives in Shopify, you are the controller and we act as your processor.
02
When you install the app, and while you use it, we access and store the following categories of data, each tied to your store and isolated per store:
| Category | What it includes |
|---|---|
| Store & session | Shop domain, Shopify OAuth session, plan and onboarding state. |
| Catalog content | Product titles, descriptions, metafields, alt text, collections — read to score and to draft rewrites. |
| Machine files | robots.txt, llms.txt, sitemap, theme and sales-channel signals. |
| Usage & billing | Content-optimization usage meters, subscription state, product analytics events. |
| AI traffic events | Referrer host and utm_source of store visits, matched to AI assistants. No cookies, no LLM calls, no personal identifiers. |
| Website & demo requests | If you submit our contact/demo form, the name, work email, store URL and message you provide — used only to respond to your request. |
We do not collect your shoppers' names, emails, or payment details through the app, and we do not build shopper profiles.
03
We use your data only to provide the service: to compute your AI Visibility Score and diagnostics, to generate draft fixes you review, to count AI-sourced traffic for your dashboard, and to meter and reconcile billing. We do not sell your data, we do not use it for advertising, and we do not use your store content to train foundation models.
04
To deliver certain features we share the minimum necessary data with: Shopify (platform, billing, and the source of your store data), a large-language-model provider accessed through our proxy (product content sent for rewriting — only when you request generation), and Exa (public queries for off-site visibility signals). These processors act on our instructions under data-processing terms and do not receive more than a feature requires. A current list is available on request at liu_ky@hisuntech.com.
05
Your store and account data is hosted and processed on cloud infrastructure in Singapore, and retained only as long as needed for the purposes described in this policy. Some sub-processors named above may process limited data in other regions; where that involves transferring personal data across borders, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. If you are in the EEA or UK, you can contact us for details of the transfer mechanism that applies to a given feature.
06
We keep scan snapshots, drafts, and settings for as long as the app is installed, so you can track your score over time and roll back changes. AI-traffic pixel events are retained for up to 180 days; conversion-funnel events are retained for product analytics. Demo-request messages are kept only as long as needed to handle your enquiry. When you uninstall, we delete or anonymize store data in line with Shopify's mandatory compliance webhooks (see below).
07
Discoverly honours Shopify's mandatory compliance webhooks — customers/data_request, customers/redact, and shop/redact — for customer-data access, redaction of customer data, and shop redaction on uninstall. Depending on your jurisdiction (including the GDPR and CCPA/CPRA) you may have rights to access, correct, export, or delete data we hold, and to object to or restrict certain processing. Request any of these at liu_ky@hisuntech.com and we will respond within the timeframes the law requires.
08
Data is isolated per store at the row level, access is scoped to the OAuth grant you authorize, and content is only written back to your store on your explicit publish action with the original retained for rollback. We encrypt data in transit, restrict internal access to what operating the service requires, and will notify you and the relevant authorities of a qualifying data breach as the law requires.
09
We may update this policy; material changes will be signalled in the app or by email. Continued use after the effective date constitutes acceptance.
Privacy questions or requests: liu_ky@hisuntech.com