Loading page content
How Store Builder uses store data
This page describes what the app does with data from your Shopify store, as built today. The app is in Shopify review and not yet in the App Store. It adds detail to the HappifyApps privacy policy.
Reviewed against the app’s code on 2026-10-08
In short
Store Builder reads your product catalogue to plan a storefront. It keeps your projects, versions and generated drafts, sends text you ask it to draft with AI to Google Gemini, and writes to your store only when you start a theme or page action: files to an unpublished theme you choose, and missing content pages.
All Happify apps run on one platform and one Postgres database (Supabase), hosted with the apps on Vercel. Store data is kept once per store, not once per app: if you install two Happify apps, they read the same copy of your products, inventory and orders.
Permissions and why
| Shopify permission | Used for |
|---|---|
| read_products | Products, variants and prices, so a project is planned around what you actually sell and AI copy can use current product facts. |
| read_themes | Lists your themes and reads the files of the unpublished theme you choose, so the app can check it is safe to change. |
| write_themes | Writes the generated homepage, section, stylesheet and page-template files to the unpublished theme you choose, and publishes it after you confirm. Shopify requires a separate approval for theme-file writes, which is pending. |
| read_online_store_pages | Reads your existing content pages, so the app only creates pages that are missing. |
| write_online_store_pages | Creates missing content pages, such as About or Contact, after a separate confirmation. Existing pages are not changed. |
What the app stores
- Projects: name, status, industry, design family and the site plan (brand settings, homepage copy and content pages), plus each saved version of it
- Products and variants copied from Shopify: Shopify ID, title, type, vendor, tags, and each variant’s title, SKU, barcode and price
- AI requests and results: your prompt, store name, industry, any brief you filled in, the product title and description used as context, and the generated copy or image, kept on the job record
- Asset records for images: source, alt text and whether you confirmed you hold the rights
- Theme publications: the theme IDs involved, the generated files and the backup theme ID used for rollback
- Monthly AI usage counts, audit log entries for merchant actions, your subscription, your settings and your encrypted Shopify access token
Read but not stored: The rest of your theme: the app reads only the specific files it will change in the unpublished theme you choose.
Customer data
Store Builder does not request customer or order permissions and handles no customer personal data. Its protected customer data level is none. Where another Happify app on your store keeps customer or order details, that app’s page describes them.
Changes the app makes in Shopify
- Theme files in an unpublished theme you choose (homepage template, page templates, a Store Builder section, a content section and a stylesheet), written only after you start a publish
- Publishing that theme as your live theme, only after you type a confirmation, with your previous live theme kept so you can roll back
- New content pages for handles that do not exist yet, only after a separate confirmation. Existing pages are left as they are.
Who else receives data
| Recipient | Purpose | Data |
|---|---|---|
| Google (Gemini API) | Drafting homepage copy and hero images when you use AI on the Advanced or Pro plan | Copy requests send your prompt, store name, industry, any brief you entered, and the title and description of a product when you choose one. Image requests send your prompt, store name and industry. No customer data is sent. Google handles the request under its own Gemini API terms. |
Hosting is on Vercel and Supabase, listed on our Sub-processors page. We do not sell data or use it for advertising.
Storefront, checkout, POS and Sidekick
- Store Builder adds no storefront, checkout or POS surface of its own. The theme files you publish are served by Shopify.
- AI is used only when you ask for a draft. It does not rewrite product descriptions, prices or policies on its own.
Uninstall and privacy webhooks
Shopify sends every app these mandatory webhooks. This is what the app does with each.
| Webhook | What happens |
|---|---|
| app/uninstalled | Marks the app as uninstalled and its subscription as cancelled, and stops syncing for it. Nothing is deleted at this point: Shopify sends the shop redaction request below 48 hours later, and any other Happify app on the store keeps working meanwhile. |
| customers/data_request | Logged on receipt. We prepare the customer’s data by hand and send it to you, the merchant, within 30 days. |
| customers/redact | Removes the customer’s name and email from the customer record; their name, email, phone and addresses from their orders; their contact details from Local Delivery Sheet run stops, along with any proof of delivery photo or signature for those stops; stored webhook records about them; and their email address wherever it was logged as an email recipient. Order lines and totals stay, so your sales history still adds up. |
| shop/redact | Deletes this app’s data for your store: its installation and encrypted access token, subscription record, settings, app-specific data (such as delivery runs and proof of delivery, zones, internal order notes), audit log entries and webhook records. The shared store data (products, inventory, orders, customers) is deleted too when no other Happify app is installed on the store. If one is, the shared data stays for that app, cut down to the customer details it needs. |
Retention
- Store Builder’s own tables (projects, versions, assets, publications and jobs) are deleted when its shop redaction request arrives.
- Theme files written to Shopify, and pages created in Shopify, stay in your store when you uninstall; remove them in Shopify if you do not want them.
- This app’s data is deleted when Shopify sends its shop redaction request, 48 hours after the app is uninstalled. Shared store data is deleted then too, unless another Happify app is still installed on the store; in that case it is deleted with the last app’s redaction.
- There is no fixed expiry for synced data while an app is installed; inventory snapshots and order history build up over time because history is what the analysis uses.
- Webhook payloads are emptied as soon as they have been processed; a delivery that failed keeps its payload for troubleshooting. Webhook delivery records are deleted after 30 days.
- Audit log entries are deleted after one year, except saved settings and zone versions, which are kept while the app is installed so you can restore them. Audit entries do not record customers’ email addresses.
- Encrypted database backups are deleted 90 days after they are taken, so data deleted from the live database can remain in a backup for up to 90 days.
Security
- Shopify access tokens are encrypted at rest (AES-256-GCM). Database tables are reachable only from our servers; the browser never talks to the database.
- Inside Shopify admin the app identifies your store from Shopify’s signed session token on every request. It never trusts a store name passed in a URL.
Requests and questions
To ask for a copy of your store’s data, or to have data deleted sooner, email admin@happifyapps.com. Settings in the app also has a “Download account data” button.