Privacy Policy — Open Pilots

This Privacy Policy describes how Open Pilots ("we", "our", or "us") collects, uses, and handles information when you install and use any of the Forever Free Shopify apps in the Open Pilots collection. By installing any pilot, you agree to the practices described in this policy.

1. Information we collect

Each pilot in the Open Pilots collection requests only the Shopify API scopes it needs to function. The full list of scopes is shown to you in the Shopify install flow before installation. Across the collection, the categories of information we may access are:

Store information: Your Shopify store domain, store name, and plan type — used to identify your store and serve the correct configuration
Pilot-specific store data: Each pilot may read store resources relevant to its function (for example, theme settings for storefront utilities, product or inventory data for conversion pilots). The exact resources accessed are determined by the scopes you approve at install time.
App configuration: Settings you choose inside each pilot's admin UI (button styles, banner schedules, behaviour preferences) are stored so the pilot can apply them on your storefront

We do not access customer personal data, order history, or any store information outside the scopes a pilot explicitly requests.

2. How we use your information

We use store data solely to operate the pilots you install:

To deliver the functionality of each installed pilot on your storefront and admin UI
To save the settings and preferences you configure inside each pilot
To diagnose issues and respond when you contact support

The Open Pilots collection is Forever Free. We do not run any billing or usage-based pricing. We do not use your store data for advertising, marketing, or to train any machine-learning model.

3. Data retention

Configuration data and the minimum store metadata required to run each pilot are stored in our database for as long as the pilot is installed on your store. You can delete all stored data at any time by uninstalling the pilot from your Shopify admin.

4. Third-party services

The Open Pilots collection uses the following third-party services to operate:

Shopify: Each pilot operates as a Shopify app and accesses your store through the Shopify API under Shopify's terms
Hosting infrastructure: Our servers run on industry-standard cloud infrastructure with encryption at rest and in transit

We do not sell, rent, or share your store data with any third parties for marketing or advertising purposes. If a specific pilot relies on an additional third-party service to deliver its core function, that service will be disclosed in the pilot's admin UI before it is used.

5. Data security

We apply standard technical and organisational measures to protect your information:

Encrypted data transmission via HTTPS/TLS
Encrypted storage for sensitive credentials and API tokens
Access controls limiting who can reach production data
Periodic security reviews of our infrastructure

6. Data deletion

When you uninstall a pilot from your Shopify admin, we permanently delete the data associated with your store for that pilot within 30 days, in line with Shopify's mandatory app data deletion requirements. You can also request immediate deletion at any time by contacting us at the address below.

7. Your rights

Depending on your location, you may have rights under applicable data protection laws (including the GDPR and CCPA) to access, correct, or delete personal data we hold about you. To exercise any of these rights, contact us using the details below.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you through the Shopify app interface of any installed pilot. Continued use of a pilot after such changes constitutes acceptance of the updated policy.

9. Contact us

Questions about this Privacy Policy or how we handle your data? Contact us at: