Findable - Privacy Policy

Hewnpath ("we", "us") respects your privacy. Findable is a Shopify app that helps merchants make their product catalog readable by AI shopping agents. This policy explains what the app and its api.hewnpath.com service ("Service") access, why, and what rights you have under GDPR and equivalent laws.

1. What we access

Once you install Findable, it reads your product catalog and theme through the Shopify Admin API to score how complete each product is for AI shopping agents. It writes back only the enrichment you approve (descriptions, SEO, categories and structured content in metafields). It never accesses, collects or stores any end customer or order personal data.

2. What we store

• Your shop domain and current plan.
• The contact email you provide, for monitoring alerts.
• AI-readiness scores from each scan (product data only, no shopper data).
• A log of the enrichment you apply, so you can roll it back.

3. What we never collect

• Shopper or customer personal data, orders or checkout information.
• Payment details (billing is handled by Shopify).

4. Why we collect it

• Catalog data: to score readiness, draft and apply enrichment, and emit structured data.
• Shop, plan and email: to run the service, monitor for regressions and send you alerts.
• Change log: to let you undo any applied change.

5. Lawful basis (GDPR Art. 6)

• Running the app you installed: performance of the contract (Art. 6(1)(b)).
• Product-quality analytics in aggregate: legitimate interest (Art. 6(1)(f)).

6. Storage, retention and deletion

Data is held on Hewnpath infrastructure running on Cloudflare (D1, region EEUR, Milan). When you uninstall Findable we stop monitoring your store immediately and delete your stored data, including through Shopify's automated shop and customer redaction webhooks.

7. Third parties

• Cloudflare: hosting, database and the AI model that drafts product copy. Privacy policy
• Resend: delivery of alert emails to you. Privacy policy
• Shopify: your store platform and payment processor; it remains the data controller for the underlying store data. Privacy policy

We do not sell, rent, or share your data with any other third party, and we do not use it to train shared models.

8. Your rights (GDPR)

You can at any time:

• Access: a copy of the data we hold for your store
• Rectification: correct inaccurate data
• Erasure: delete your store's records (uninstalling also triggers this)
• Portability: a machine-readable export
• Lodge a complaint with your national data protection authority

Email [email protected] with the subject "GDPR request". We respond within 30 days.

9. Changes

We will update this policy as the service evolves and revise the effective date above.

10. Contact

Hewnpath
Email: [email protected]
Country: Italy