This policy explains what personal data ECOM FR LLC processes when you visit convrail.com or use Convrail, why, with whom it is shared, and your rights. We wrote it to be read, not skimmed: the short version is that customer emails, phone numbers, names and customer IDs are hashed before we store or send anything, this website sets no cookies of its own, and you can reach us at [email protected].
1. Who is responsible
For data about you as a merchant or visitor of this website, ECOM FR LLC is the controller. For data about your store's customers that we process to provide the Service, you (the merchant) are the controller and we act as your processor, on your instructions and under the data processing addendum of the terms of service.
2. Data about you (merchant, website visitor)
| Data | Why | Retention |
|---|---|---|
| Store domain, platform, currency, account email | Operate the Service, reach you about alerts and changes | While the store is connected; deleted 48 hours after uninstall (Shopify store redaction) or on request |
| Platform access token, OpenAI pixel ID and API tokens, SFTP credentials | Act on your behalf toward Shopify, WooCommerce, BigCommerce and OpenAI | Encrypted with AES-256-GCM; platform access tokens are deleted as soon as you uninstall, the others with the store or on request |
| Contact form: name, email, store URL, platform, message | Answer your request | Deleted automatically after 24 months, or earlier on request |
| Early-access form: email, language, page of origin | Send you the install link | Deleted on request or once early access ends |
| Hashed IP address on form submissions | Abuse prevention | Same as the form entry |
This website uses no analytics, no advertising tags and sets no cookies of its own. Fonts are served from our own domain: no third party receives your IP address when you read these pages. The only exceptions are the videos on the home page and on the Shopify, WooCommerce and BigCommerce pages: each one loads from YouTube, in its privacy-enhanced mode, only when you press play, and YouTube then receives your IP address under its own privacy policy.
3. Data about your customers (processed for you)
| Data | Origin | Notes |
|---|---|---|
Conversion events: type, timestamp, page URL, oppref click identifier, the anonymous browser identifier provided by the store platform, IP address and user agent of the buyer’s browser | Browser pixel and order webhooks | IP address and user agent are stored and sent to OpenAI for matching, as its API expects |
| SHA-256 hashes of customer email, phone number, first name, last name and customer ID | Order webhooks | Hashed on receipt, before storage: the clear values are never stored |
| City, ZIP or postal code, region and country of the order | Order webhooks | Stored and sent to OpenAI in clear, as its API expects them for matching |
| Orders: ID, amount, currency, line items, landing URL, referrer | Order webhooks | Used for attribution and the dashboard |
| Consent state | Pixel and store consent settings | When a visitor declines, the sale is still reported to OpenAI, with the opt-out flag set and without any personal data (no hashed identifiers, location, IP address or user agent) |
Visitor sessions used for attribution: a session or random visitor identifier, the oppref click identifier, landing URL, referrer, and the cart or checkout identifier | Browser pixel | On BigCommerce, recorded only for visits that came from ChatGPT, so that the order can be linked to the visit through its cart |
An automated guard inspects every payload before it leaves our infrastructure and refuses to send anything containing a clear email address, a forbidden personal-data field (email, phone, first or last name, street address, date of birth) or a supposedly hashed identifier that is not a valid SHA-256 hash.
- Retention, applied by a daily deletion job: conversion events 13 months (test events 90 days); orders and their attribution 13 months; visitor sessions used for attribution 90 days after the last visit.
- Uninstall: when you uninstall the Shopify app, your store’s access tokens are deleted immediately, and all the store’s data is deleted when Shopify sends the store redaction request (shop/redact), 48 hours after uninstall.
- When you uninstall the BigCommerce app, your store’s access token is deleted immediately, BigCommerce removes the scripts the app added to your storefront, and any paid subscription is cancelled. The store’s other data follows the retention periods above, so that a reinstall resumes where it stopped; write to us and we delete all of it.
- Customer deletion: when a customer asks your store to delete their data, the platform’s customer redaction request makes us delete that customer’s events and orders. BigCommerce sends no such request: forward the customer’s request to us and we delete their events and orders.
4. Product data
Your catalog (titles, descriptions, prices, images, availability, identifiers) is synced to build the product feed and, if you use the optimization features, to compute scores and drafts. Product data is not personal data in itself; it is deleted with the store.
5. Recipients and sub-processors
| Recipient | Role | Location |
|---|---|---|
| Infomaniak Network SA | Hosting of the platform and database | Switzerland |
| OpenAI | Receives conversion events (hashed identifiers, city, postal code, region, country, IP address, user agent) and the product feed, on your instruction and under your OpenAI account | United States |
| AI writing provider: Anthropic or DeepSeek | Only if AI rewriting is enabled: receives product title, description, brand, category, variant options and main product image to draft copy. No customer data | United States (Anthropic), China (DeepSeek) |
| Twilio SendGrid | Sends the emails we send to merchants: alerts, reports and contact notifications. No customer data | United States |
We do not sell personal data and do not share it with advertisers. Transfers outside the European Economic Area rely on the recipient’s data processing terms and standard contractual clauses where required; hosting in Switzerland benefits from an EU adequacy decision.
7. Security
- Secrets (platform access and refresh tokens, including the app’s Shopify sessions, API tokens, SFTP credentials) are encrypted at rest with AES-256-GCM.
- All traffic uses TLS. Webhooks are verified by HMAC signature before processing.
- Personal identifiers are hashed on receipt; an automated guard blocks clear personal data before any network call.
- Access to production systems is limited to the people who operate the Service, and every access to a store’s data through our API is logged.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to lodge a complaint with a supervisory authority. Write to [email protected]; we answer within 30 days. If you are a customer of a store that uses Convrail, please contact the store first: it is the controller of your data and we act on its instructions.
9. Children
The Service and this website are intended for businesses and are not directed to children under 16.
10. Changes and contact
We update this policy when our processing changes; the date at the top is the current version. Contact: [email protected]. Postal address: ECOM FR LLC, 28 Geary St STE 650 #303, San Francisco, CA 94108, United States.