Privacy Policy — Kintsugi AI

Last updated: 28 May 2026 · Effective date: 28 May 2026

This Privacy Policy explains how Adrenalina Marketing S.r.l. ("we", "us", "our"), the developer of the Kintsugi AI – 404 to 301 Shopify application (the "App"), collects, uses, stores, and protects information when a merchant ("you") installs and uses the App.

By installing or using the App, you agree to the practices described in this policy. If you do not agree, please uninstall the App.

1. Who we are (Data Controller)

Adrenalina Marketing S.r.l.
Registered address: Corso Garibaldi 468/a, 89127 Reggio Calabria, Italy
VAT (Partita IVA): IT03226630808
Contact e-mail: amministrazione@ewebite.it

2. Scope of this policy

This policy applies only to the Kintsugi AI App and the data it processes through the Shopify Admin API. It does not apply to Shopify itself, to your storefront, or to any third-party service not listed below.

3. Information we collect

3.1 Store information

Your shop domain (e.g. your-store.myshopify.com).
The access token issued by Shopify when you install the App, used to call the Shopify Admin API on your behalf.
Your plan and subscription status for billing purposes.

3.2 Catalog and URL data

Product data: titles, handles, descriptions, vendors, product types, tags, prices, and URLs.
Broken (404) URLs detected on your store, including those found via your sitemap and internal links.
Redirect suggestions generated by the App and the 301 redirects created in your store.

3.3 Support data

The e-mail address and message content you submit through the in-app support form.

3.4 Preferences

Interface preferences (theme and language) stored locally in your browser via localStorage. These never leave your device and are not used for tracking.

We do not access your customers' personal data. The App requests only product, navigation, and content permissions. It does not request access to customers, orders, or any shopper personal information, and therefore does not collect, store, or process it.

4. How we use information

To detect 404 errors and match each broken URL to the most relevant 301 redirect target.
To generate AI-assisted semantic summaries and embeddings of your products to power matching.
To create and manage 301 redirects in your store when you approve them (or automatically, when you enable auto-apply).
To provide customer support and respond to your requests.
To manage your subscription and billing through Shopify.

5. AI processing and sub-processors

To generate redirect suggestions, product text (such as titles, descriptions, and metadata) is sent to AI providers that create semantic summaries and embeddings. We share data only with the service providers below, strictly to operate the App:

Sub-processor	Purpose	Data shared
Shopify Inc.	App platform & billing	Store domain, catalog, redirects
Anthropic, PBC (Claude)	AI product summaries	Product text/metadata
Voyage AI	Semantic embeddings	Product text/metadata
Resend	Transactional e-mail (support, account)	E-mail address, message content
DigitalOcean	Cloud hosting & database	All App data, at rest

We do not sell your data, and we do not use it to train our own or third-party AI models.

6. Data retention

We retain your data for as long as the App remains installed. When you uninstall the App, or upon a verified deletion request, we delete your store record, catalog data, suggestions, and redirects from our database within 30 days. Support records may be retained longer where required for legal or accounting purposes.

7. Data security

All data is transmitted over encrypted HTTPS connections.
Access tokens and credentials are stored with restricted access; admin passwords are hashed (PBKDF2-HMAC-SHA256) and never stored in plain text.
Access to production systems is limited to authorized personnel.

8. Your rights (GDPR and similar laws)

If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with similar laws, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, contact us at amministrazione@ewebite.it.

We support Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Because the App does not store shopper personal data, data-request and customer-redaction webhooks return no personal data; the shop-redaction webhook triggers deletion of your store's data from our systems.

9. International data transfers

Some of our sub-processors are located outside the European Economic Area (for example, in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the data processing terms and standard contractual clauses offered by those providers.

10. Cookies and tracking

The App does not use advertising or analytics cookies. It uses only functional browser localStorage to remember your theme and language preferences, and short-lived session tokens for the administration panel.

11. Children

The App is a business tool intended for merchants and is not directed to children under 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

13. Contact us

For any question about this policy or your data, contact:
Adrenalina Marketing S.r.l. — amministrazione@ewebite.it