Privacy Policy
How Word of Agent for Shopify handles merchant data.
Last updated March 13, 2026.
What we collect
When you install this Shopify app, we store your shop domain, store metadata, the granted Shopify scopes, an encrypted offline Admin API access token, and the Word of Agent property identifiers needed to sync your store into the rest of the system.
What we use it for
- To authenticate requests you authorize through Shopify OAuth
- To create the canonical Word of Agent property and `shopify_stores` records
- To queue Shopify imports so order and product data can be analyzed in Word of Agent
- To satisfy Shopify's compliance and uninstall webhook requirements
How credentials are protected
Offline Admin tokens are encrypted at rest before they are saved. The same encrypted token format is used by the existing Word of Agent import system so we do not need to downgrade or duplicate credential storage.
Data retention and deletion
If the app is uninstalled, the embedded app deletes its install registry row and removes the canonical Shopify store connection record that the rest of Word of Agent uses. If you need additional deletion support, contact us and include your store domain.
Contact
Questions about privacy can be sent to support@wordofagent.ai.