Privacy policy

OpenAI Ads Feed & Pixel, operated by Esafqa. Last updated 8 September 2026.

This app is a Shopify public app. It is not an official OpenAI or Shopify product. This page describes data processing for App Store listing and merchant review. It is not a third-party compliance certification.

Data we process

Shopify shop domain, catalog product and variant fields needed to build an OpenAI-compatible product feed, feed configuration, and Pixel setup state. For conversion measurement we process checkout tokens, order IDs, currency, amounts, product variant IDs on those events, related storefront or checkout URLs, OpenAI Ads attribution values (oppref and obref) when present, event timestamps, and Conversions API delivery status.

Data we do not collect

We do not collect or store customer name, email, phone, or address.

Purposes

Product feed generation for OpenAI Ads, Pixel setup, diagnostics, and advertising measurement. Conversion events are sent to OpenAI Ads over HTTPS when the merchant connects an Ads account. The app is hosted on Railway with PostgreSQL.

Retention

Checkout attribution and Conversions API delivery records are deleted 90 days after last update, and immediately when Shopify sends customers/redact or shop/redact. Shop data is removed after uninstall according to Shopify’s shop/redact webhook.

Security

Measurement records and Ads credentials are encrypted at rest with AES-256-GCM. Network traffic uses HTTPS/TLS. Shopify webhook signatures are verified.

Consent

Storefront measurement follows Shopify Customer Privacy for the shop’s configured regions. The Shopify Web Pixel loads only when its declared analytics, marketing, and sale-of-data purposes are allowed. An explicit visitor opt-out blocks conversion sends.

Installed merchants can also read this notice in the app under Settings. Merchant data-processing terms: /data-processing. Support: /support.