Privacy policy

Who we are

CopyMeld is an app for Shopify merchants that generates product descriptions in your brand's voice. It is operated by CodeContext Pty Ltd, based in Australia.

For anything in this policy, or to exercise any of the rights described below, write to us at [email protected].

What we do not collect

CopyMeld requests read and write access to your products only. We do not request access to your customers or your orders, and we do not read or store your customers' personal information, order records, or payment details. If that ever changes, we will update this policy and Shopify will ask you to approve the new permissions before they take effect.

We do not sell personal information, and we do not use it for advertising or profiling.

What we collect

When you install and use CopyMeld, we collect and store:

• Your store's installation details — your Shopify shop ID and shop domain, the access token Shopify issues to the app, the permissions you granted, and when the app was installed or uninstalled.
• Staff identifiers — the Shopify staff user ID of whoever set up your brand voice, generated a description, or applied one to a product, so changes in the app are attributable.
• The content you create in CopyMeld — your brand voice guidelines, customer personas, setup answers, and any instructions you give when generating a description.
• Product content — a snapshot of the product details we use to generate copy, including titles, existing descriptions, and selected product fields.
• Generated output and usage — the descriptions produced for you, the model and provider that produced them, the outcome of each generation, and counts of how much you have generated.
• Compliance records — a minimal audit record each time Shopify sends us a privacy request on your behalf. Where Shopify includes a customer email or phone number in such a request, we store only a one-way hash of it, never the value itself.

On this website, we also collect an email address if you submit one to our waitlist, and aggregate, cookieless page analytics that do not identify you.

Why we collect it, and on what basis

We use this information to run the app you have asked us to run: to authenticate with Shopify, to generate descriptions that match your brand and audience, to write approved descriptions back to your products, to show you your own history and usage, to support you when you contact us, and to keep the service secure and working.

For merchants in the European Economic Area and the United Kingdom, our legal basis is performance of our contract with you, and our legitimate interest in operating, securing, and improving the service. Where we rely on consent — for example, joining our waitlist — you can withdraw it at any time.

Artificial intelligence

Generating a description means sending the relevant content — the product details, your brand voice guidelines, and your chosen customer persona — to one of the AI providers named under “Who we share it with” below, which returns draft copy. Under our commercial agreements with those providers, the content we send is used only to produce your result. It is not used to train their models.

CopyMeld produces drafts. Nothing is published to your storefront unless you review it and choose to apply it.

Who we share it with

We do not sell or rent your information. We share it only with the service providers we rely on to run CopyMeld, each of which is bound to use it only on our instructions:

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Where your information is stored

CopyMeld is hosted in the United States, and the providers listed above process information in the countries shown. If you are in Australia, this means your information is disclosed to overseas recipients under Australian Privacy Principle 8. If you are in the European Economic Area or the United Kingdom, transfers outside your region are made under the European Commission's standard contractual clauses, or an equivalent safeguard.

How long we keep it

We keep your information for as long as CopyMeld is installed on your store. When you uninstall the app, Shopify sends us a shop redaction request; on receiving it we delete your store record and everything attached to it — your brand voice guidelines, customer personas, product snapshots, generated descriptions, and sessions. We retain only a minimal record that the deletion happened, which is what lets us demonstrate to Shopify and to you that it did.

Waitlist email addresses are kept until you ask us to remove them, or until the waitlist is retired.

How we protect it

Traffic to and from CopyMeld is encrypted in transit with TLS. Data at rest is encrypted by our hosting provider. Access to production systems is limited to those who need it, and the app requests the narrowest set of Shopify permissions it can do its job with. Requests from Shopify are verified cryptographically before we act on them.

No system is perfectly secure. If a breach affects your information and is likely to cause serious harm, we will notify you and the relevant regulator as the law requires.

Your rights

You can ask us to give you a copy of the information we hold about you, to correct it, or to delete it. Merchants in the European Economic Area and the United Kingdom may also ask us to restrict or object to certain processing, and to receive their information in a portable format.

Write to [email protected] and we will respond within 30 days. You can also delete everything yourself at any time by uninstalling CopyMeld from your Shopify admin.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the data protection authority in your own country.

Changes to this policy

When we change this policy we will update the effective date at the top of this page. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.