Privacy Policy

Whose data this covers

Merchants — the store owners and staff who install and configure Unico. And shoppers — the visitors to a merchant's storefront where Unico is active.

For shopper data, the merchant is the data controller: the merchant decides to install Unico and what its own storefront privacy notice says. We act as a processor, handling shopper data only to operate Unico for that merchant's store.

What Unico reads from your store

When you install Unico, you grant it the following Shopify access scopes. Unico requests only what it needs to run popups, discounts, and revenue attribution.

• read_products — syncs your catalog: product titles, prices, inventory levels, images, and collections.
• read_orders and read_draft_orders — receives order webhooks to record which products converted and attribute revenue to a popup session. No customer name, email, or address is stored from orders.
• read_customers — reads customer records so purchase behavior can be aggregated into per-store signals. Emails are hashed one-way (see below); raw personal details are not stored.
• write_discounts — creates and manages the discount codes and automatic discounts your popups offer, on your store only.
• write_pixels and read_customer_events — installs a Shopify custom pixel on your storefront to emit anonymous behavioral events.

We also store your shop domain, the store owner's name and email, app configuration (popup designs, discount tiers, experiments, billing plan), and support correspondence. Payments run through Shopify — we never see or store card numbers.

How customer data is handled

To measure repeat behavior without keeping personal data lying around, customer emails seen during syncs are normalized and passed through a one-way hash into a store-scoped anonymous identifier. The identifier differs for every store, so activity can never be linked across stores, and the original email cannot be recovered from it.

What persists is aggregate behavior tied to that anonymous identifier — for example lifetime spend bands and product affinities — used only to decide which popup, product, or discount a shopper on your store should see.

Shopper behavior events

The Unico pixel fires events when shoppers interact with recommendation surfaces — for example impressions, product clicks, and completed checkouts linked back to a session. No personally identifiable information is attached to any event.

• impression — a surface became visible in the shopper's viewport.
• click — the shopper clicked a product within a surface.
• hover — engagement signal from product hover.
• decision — Unico served a ranked product list to a surface.
• conversion — an order was completed and linked back to the session.

Shopper identifiers

Unico uses two opaque, store-scoped tokens to stitch events together. Neither token is linked to a Shopify customer account, email, or any external identity.

• _aco_shopper_id — persists across sessions for the same browser on the same store.
• _aco_session_id — short-lived token scoped to a single browser session.

There is no cross-store tracking. Because the pixel runs on your storefront, shopper cookie consent is governed by your store's own cookie banner and privacy notice — please make sure they disclose analytics popups.

Where data lives

Unico routes data through regional edge clusters, ClickHouse, and PostgreSQL infrastructure.

• AWS-hosted edge — decisions are handled in regional clusters close to your shoppers.
• ClickHouse — raw behavioral events are stored for signal computation.
• PostgreSQL — catalog, surfaces, policies, and computed signals.

How data is used — and not used

Behavioral events are aggregated into per-product signals and used exclusively to rank products and offers on your store's surfaces, operate and secure the service, provide support, and bill your subscription. Unico does not use your store's data to influence rankings on any other store, does not sell personal data, and does not use merchant or shopper data for third-party advertising.

When data is shared

Data leaves our systems only in these cases:

• Processors — infrastructure providers that host the service (Shopify for the app platform and billing; AWS-hosted compute, ClickHouse, and PostgreSQL). They process data only on our instructions and under contract.
• Shopify compliance webhooks — mandatory privacy webhooks are answered automatically, with no action needed on your part.
• Legal obligations — where disclosure is required by law or to protect the rights, safety, and integrity of the service.

Data is processed in regional infrastructure close to shoppers and may cross borders in doing so; where required we rely on safeguards such as standard contractual clauses with our processors.

Your rights

Merchants can request access, correction, export, or deletion of their store data at any time via team@aco-commerce.com. Shoppers should exercise privacy rights through the merchant whose store they visited, since the merchant controls that storefront's data.

Store, catalog, event, and signal data is kept only while your installation is active and for a short operational window afterwards (up to 30 days); support correspondence up to 24 months. After that, data is deleted or irreversibly aggregated.

Uninstall and data deletion

When you uninstall Unico from Shopify, collection stops immediately: the pixel is removed from your storefront, syncs stop, and a deletion job removes all data associated with your store — catalog records, behavioral events, computed signals, surfaces, and policies.

Security and children

Data is encrypted in transit and at rest, access is limited to the systems and staff that need it, and sessions use Shopify's managed authentication. If you suspect unauthorized access, notify us promptly at team@aco-commerce.com. Unico is a business tool for merchants and is not directed at children.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the product and reflected in the “last updated” date below. Continued use after a change takes effect means you accept the updated policy.