Last updated: October 2026 · AliceLabs LLC
Data we collect: When you install StoreGenie AI, we receive your Shopify store URL, OAuth access token (encrypted at rest in Cloudflare KV), and webhook events for app lifecycle. We do NOT collect customer PII directly.
How we use data: When you ask a question, we send your question (text only, no customer data) to Cloudflare Workers AI (Llama 3.2) for intent classification. We then execute predefined Shopify Admin GraphQL queries to fetch store data (orders, products, customers) and format the response in natural language.
Data storage: All data stored in Cloudflare Workers KV (encrypted at rest). Access tokens stored per-shop with scoped permissions. Conversation history kept for 24 hours (Free) or 90 days (Pro), then automatically deleted.
Data deletion: When you uninstall the app, Shopify sends an "app/uninstalled" webhook and we delete all your store's data within 24 hours. For GDPR requests (customers/redact, shop/redact, customers/data_request), we delete data immediately.
Third parties: We use Cloudflare Workers AI (https://developers.cloudflare.com/workers-ai/) for intent classification, running within Cloudflare's network (no external data leaves). Only your question text is sent — never access tokens, customer PII, or order data. Cloudflare is GDPR-compliant.
Safe AI: The AI never generates raw GraphQL queries. It only classifies your question into one of 12 predefined intents, each with safe hardcoded queries. This prevents SQL injection-like attacks.
Your rights: You can request data export or deletion at any time by emailing hello@alicelabs.site or through Shopify's customer data request webhook.
Contact: AliceLabs LLC · Sheridan, Wyoming, USA · hello@alicelabs.site