Privacy Policy

Last Updated: July 24, 2026

myuser.ai is operated by myuser.ai LLC ("myuser.ai", "we", "our", or "us"), and we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

1. Information We Collect

1.1 Information from Shopify

When you install our app, we access the following data from your Shopify store:

• Customer Data: Names, email addresses, phone numbers, and order history
• Order Data: Order details, products purchased, and transaction amounts
• Product Data: Product information, descriptions, and pricing
• Store Information: Store name, domain, and configuration
• Browsing Behavior: Page views, product views, and cart activity (via our pixel)
• Session Replays: When a merchant enables session recording, we capture a replay of how a shopper's visit unfolded on the storefront (pages viewed, clicks, scrolling, and interface interactions). Replays are a reconstruction of the page — never a video, screen capture, audio, or camera recording. Everything a shopper types is masked at the point of capture, before it leaves their browser, with one exception: information the shopper actively submits through the merchant's own signup pop-up (which the merchant already receives as a form submission). Recording honors the store's cookie/consent banner (Shopify Customer Privacy): visitors who have not permitted analytics processing are not recorded.

1.2 Information You Provide

• Account registration information
• Email templates and marketing content you create
• Communication preferences

1.3 How You Use Our Own Software

• Session Replays of Our App and Website: We record how our own software is used — the pages you open, what you click, and how our interface responds — so we can see where it is confusing or broken and fix it. This covers both myuser.ai and our app inside your Shopify admin. A replay is a reconstruction of the page, never a video, screen capture, audio, or camera recording.
  • In our Shopify app, the capture is limited to our own frame — the rest of the Shopify admin is a separate origin and is never recorded — every input field is masked before anything leaves your browser, and the screens showing your customers' names, email addresses and phone numbers are excluded at the point of capture.
  • On myuser.ai, we record what you do in your own workspace. Fields are captured as you use them so we can see what actually went wrong, with the exception of password fields, which are always masked. We do not record anyone else's workspace to you.
  
  
  Alongside a replay we record what your browser reports about itself — device type, browser, operating system, screen size, language and timezone — and an approximate location, no finer than a city, worked out from your IP address by the network in front of our servers. We use it to tell one session from another and to reproduce layout problems. We do not store your IP address, and we never collect precise location.
  
  These replays are used by our team only, never shown to other customers, and never used for marketing or profiling. Email us and we will exclude your account entirely.

2. How We Use Your Information

We use the collected information to:

• Generate AI-powered personalized marketing messages for your customers
• Analyze customer behavior to optimize message timing and content
• Send emails and SMS messages on your behalf to your customers
• Provide analytics and insights about your marketing performance
• Show merchants replays of individual storefront sessions so they can understand shopper behavior and improve their store
• Improve our services and develop new features

3. Third-Party Services

We use the following third-party services to provide our functionality:

• OpenAI: We use OpenAI's API to generate personalized marketing content. Customer data (names, purchase history, browsing behavior) may be sent to OpenAI to generate relevant messages. OpenAI's privacy policy can be found at openai.com/privacy
• SendGrid: We use SendGrid to deliver emails to your customers. SendGrid's privacy policy: sendgrid.com/policies/privacy
• Twilio: We use Twilio to send SMS messages to your customers. Twilio's privacy policy: twilio.com/legal/privacy
• Google Cloud / Firebase: We use Google Cloud for hosting and Firebase/Firestore for data storage. Google Cloud's privacy policy: cloud.google.com/privacy

4. SMS / Text Messaging Program

We send SMS and MMS text messages on behalf of the merchants who use our Service. This section describes how information relating to that messaging program is handled.

• No sharing for third-party marketing: Mobile phone numbers and SMS opt-in consent are never sold or shared with third parties for their own marketing purposes. They are used only to deliver messages for the merchant a shopper opted in to, and are disclosed only to the service providers needed to send those messages (e.g., Twilio, our SMS provider).
• Opt out (reply STOP): You can cancel text messages at any time by replying STOP (or UNSUBSCRIBE) to any message. You will receive one confirmation message and then no further messages from that program.
• Help (reply HELP): For help with the messaging program, reply HELP to any message or email us at support@myuser.ai.
• Frequency and rates: Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of any purchase.

5. Data Retention

We retain your data for as long as you have the app installed. After you uninstall the app:

• We will delete your data within 30 days of receiving a shop/redact webhook from Shopify
• You may request immediate data deletion by contacting us
• Session replays are automatically deleted 30 days after capture unless the merchant explicitly saves a specific replay. Replays are also deleted when a customer or shop is redacted through Shopify's privacy webhooks
• Replays of your use of our own software (section 1.3) are automatically deleted 90 days after capture. A replay our team has marked to keep — for example one attached to an open bug — is kept past that point until we delete it, and we will delete any replay of your account on request
• Some anonymized, aggregated data may be retained for analytics purposes

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure cloud infrastructure with access controls
• Regular security reviews and updates

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access: Request a copy of the data we hold about you or your customers
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request a machine-readable copy of your data
• Object: Object to certain processing of your data

To exercise these rights, contact us at team@myuser.ai

8. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt-out of the sale of their personal information. We do not sell personal information.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.