YYEEDOOR
Legal

Privacy Policy

Effective date: October 13, 2026. This policy explains how YEEDOOR handles information when you visit our website, use the YEEDOOR merchant workspace, use YEEDOOR AI Operating Team, or use Yeedoor AI Store Manager.

1. Scope

This Privacy Policy applies to YEEDOOR websites, support channels, the YEEDOOR merchant workspace, YEEDOOR AI Operating Team, and Yeedoor AI Store Manager, including the Shopify app available at app.yeedoor.com. It describes the information we process, why we process it, how long we keep it, and the choices available to merchants and users.

2. Information we may process

Website and support information

When you contact us, we may process your name, email address, company or store name, message content, and technical information necessary to respond and secure the service.

Billing and transaction information

When you purchase a YEEDOOR website subscription, the checkout may be provided by an authorized payment partner acting as a payment processor or Merchant of Record. That provider may collect billing contact information, billing address, tax information, payment-method details, and transaction data according to its own privacy notice. YEEDOOR may receive limited transaction and subscription information such as customer or account identifiers, transaction references, subscription status, amount, currency, invoice or refund status, and limited billing contact information needed to provide the service and support the account. Full payment-card numbers are processed by the applicable payment provider and are not intended to be stored by YEEDOOR.

Optional website analytics and consent

On the public YEEDOOR website, we use YEEDOOR first-party analytics to understand how visitors discover and use our public pages. Optional analytics is off unless you choose “Accept analytics” in the website Privacy choices. When enabled, we may record a pseudonymous visitor/session identifier, the page path, referring page, and safe interaction metadata such as which link or button was clicked. We do not use this analytics layer to record form field contents, passwords, authorization tokens, payment card data, or other authentication secrets. The public website analytics described here is used for product and site improvement, not advertising personalization. You can reopen Privacy choices on the website to change your analytics choice.

Connected commerce and business data

When a merchant connects a supported commerce, analytics, search, advertising, or marketplace account through an official authorization flow, YEEDOOR may process the account identifiers, metadata and business data made available within the permissions granted by that platform and the merchant. We use this data only to provide merchant-facing software functionality, diagnostics, recommendations, approved workflows, security and support.

Shopify store information

When a merchant installs or authorizes Yeedoor AI Store Manager, Shopify may provide identifiers and store information required for authentication and app operation. Depending on the scopes granted to the app and the merchant's account permissions, the app may process store profile information, product information, inventory-related information, and order-level operating information used to generate merchant-facing diagnostics.

We do not ask merchants to provide their Shopify account password to YEEDOOR. Shopify authentication is handled through Shopify's authorization flow.

Google-connected services and Google user data

When a user or authorized account administrator connects a Google service through Google's OAuth authorization flow, YEEDOOR may access only the Google data permitted by the scopes and permissions that the user grants. Depending on the connected services, this may include Search Console site properties, search performance and indexing information; Google Analytics 4 properties, configuration and reporting data; Google Merchant Center account, product, feed and diagnostic data; Google Ads account, campaign, configuration and performance data; and identifiers needed to map the correct Google assets to the user's YEEDOOR workspace.

YEEDOOR does not ask users to provide their Google Account password. Google authentication is handled by Google. OAuth access and refresh tokens may be stored securely to maintain the connection authorized by the user. Access remains limited to the granted scopes and can be revoked by the user through their Google Account or by disconnecting the integration where that option is available in YEEDOOR.

YouTube channel connections

When you choose to connect a YouTube channel, YEEDOOR uses YouTube API Services to confirm which channel you have selected. With your permission, we may access your channel ID, channel name, basic channel information, and the permissions you have granted. If you ask YEEDOOR to upload a video, we use that authorization to send the video and its associated details to your selected YouTube channel. Connecting a channel does not, by itself, publish any videos.

You stay in control of your channel. YEEDOOR does not sell your YouTube account information or use it to target advertising. We use the information to provide the channel connection and video publishing services you request, to check that an action completed, and to protect and support your account. Access is limited to the features you authorize. We do not ask for your YouTube password.

You can withdraw YEEDOOR's access at any time through your Google Account connections. You can also request removal of stored connection details and related YouTube data by emailing aiken@yeedoor.com or using our data deletion request page. When access ends, we stop using that authorization and handle retained information in accordance with our deletion policy and applicable platform requirements. Videos already posted to your channel remain in your YouTube account unless you remove them there.

By connecting a channel and using these features, you also use services provided by YouTube and Google. Please review the YouTube Terms of Service and Google Privacy Policy.

3. How we use information

  • Provide and operate YEEDOOR AI Operating Team, the YEEDOOR merchant workspace, Yeedoor AI Store Manager, and related merchant-facing functionality.
  • Authenticate connected stores and platform accounts, maintain authorized connections, and protect the service from misuse.
  • Generate connected analytics, operating snapshots, diagnostics, alerts, recommendations, and review items for the authorized user or merchant.
  • Carry out supported actions only where the connected platform permits them and, for merchant-controlled workflows, where the required user approval has been provided.
  • Read back and verify supported changes and maintain appropriate audit history.
  • Respond to support, privacy, account, billing, subscription, refund, and data-deletion requests.
  • Maintain subscription status and reconcile transaction, invoice, refund, or entitlement information received from authorized payment partners.
  • Maintain service reliability, debug failures, and improve user-facing product performance.
  • Meet legal, security, contractual, Shopify, Google, and other applicable platform obligations.

4. Data minimization and access

We aim to process only information that is reasonably necessary for the current user-facing functionality. Actual access depends on the scopes, permissions, and assets granted through each connected platform, including Shopify and Google. YEEDOOR does not use a connection to expand access beyond the permissions granted by the user. If a data type or action is not available under the granted permissions, related diagnostics, recommendations, or actions may be unavailable or limited.

5. Storage and retention

Application records, connected-platform records, operational snapshots, and authorization tokens are retained only for as long as reasonably needed to provide the service, maintain security and auditability, satisfy legal obligations, resolve disputes, or comply with applicable platform requirements. When a shop uninstalls the app or Shopify sends an applicable redact request, we process the request according to Shopify's compliance requirements and our operational retention rules.

For Google-connected services, revoking Google authorization or requesting deletion stops future access once the revocation or deletion is processed. Where applicable, stored Google OAuth tokens are deleted or invalidated and associated Google-derived data is deleted or de-identified when it is no longer reasonably required for the service, security, legal, or audit purposes, subject to reasonable backup and log retention cycles.

6. Shopify compliance requests

Yeedoor AI Store Manager supports Shopify compliance webhook flows for customer data requests, customer data deletion requests, and shop data deletion requests. These requests are handled through the app's compliance endpoints and internal procedures.

7. Service providers and payment partners

We may use infrastructure, hosting, monitoring, email, payment processing, Merchant of Record, billing, tax, fraud-prevention, and other service providers to operate and secure the service and to complete transactions. These providers may process information under our instructions or, where they act independently as a payment processor or Merchant of Record, under their own applicable terms and privacy notices. We require service providers acting on our behalf to handle information only for authorized purposes and subject to appropriate safeguards. We do not sell Google user data or use Google user data for advertising.

8. Google API Services and Limited Use

YEEDOOR's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is used only to provide or improve user-facing YEEDOOR features for the authorized user or merchant, such as connected analytics, diagnostics, recommendations, merchant-approved actions, verification, support, security, and service reliability. We do not use Google user data to train generalized AI or machine-learning models. We do not transfer Google user data except as necessary to provide or secure the service, comply with applicable law, or with the user's explicit direction or consent.

9. Security

We use technical and organizational measures designed to protect information, including encrypted HTTPS connections, access controls, protected credential storage, platform-specific authorization controls, and separation of public website and application services. For our current security controls and marketplace-specific requirements, see the YEEDOOR Security & Trust Center. No internet service can guarantee absolute security.

10. International processing

Because YEEDOOR supports cross-border commerce, information may be processed in jurisdictions different from the merchant's location where our infrastructure or service providers operate, subject to applicable law and contractual safeguards.

11. Your choices and requests

You may contact us to ask about personal information associated with your support interaction, request correction or deletion where applicable, or raise a privacy concern. Shopify merchants may uninstall the app through Shopify to terminate future app access to their store. Users who connect Google services may revoke YEEDOOR's access through their Google Account permissions and may contact YEEDOOR to request deletion of associated Google-connected data where applicable.

12. Children

Our commercial services are intended for businesses and authorized business users and are not directed to children.

13. Changes to this policy

We may update this policy as the product, platform requirements, or applicable law changes. The effective date at the top of this page will identify the current version.

14. Contact

Privacy questions can be sent to aiken@yeedoor.com. When your request concerns a connected service, please include enough information to identify the relevant YEEDOOR workspace, Shopify store, or Google-connected account or asset without sending passwords or other authentication secrets.