Who we are
Pixoo LLC (“we”, “us”) builds and runs OpenAI Ads Pixel (the “App”), a Shopify app that reports storefront activity from a merchant’s store to OpenAI Ads so the merchant can measure their ChatGPT ads. This policy explains what information the App handles, why, and what choices you have.
If you shop at a store that uses the App, the store is responsible for your information and we process it on the store’s behalf. Please read that store’s own privacy policy as well.
Information we collect
From merchants who install the App
- Your store’s Shopify domain and the access token Shopify issues when you install the App.
- Basic details Shopify shares about the staff account that opens the App, such as name, email address and language, where Shopify provides them.
- Your subscription plan and status, as reported by Shopify. Shopify handles all payments; we never receive card or bank details.
- The OpenAI pixel ID and Conversions API key you enter, and the settings you choose, such as which events to send.
From visitors to a merchant’s store
Only after the visitor has given the consent described below, the App collects:
- Shopping activity: pages and products viewed, items added to the cart, checkouts started and orders placed, including product details, quantities, prices, currency and the order number.
- Identifiers Shopify assigns to the browser, cart and checkout.
- Ad click identifiers that OpenAI adds when someone arrives from a ChatGPT ad.
- The page the visitor first landed on (without any query string), their IP address and their browser’s user agent.
The App does not collect shoppers’ names, email addresses, phone numbers, postal addresses or payment details.
How we use it
- To send conversion events to the merchant’s own OpenAI Ads account, so the merchant can see which ads lead to sales.
- To link a later purchase to the ad click that led to it, and to make sure each order is counted once.
- To show the merchant reports, connection tests and alerts about whether tracking is working.
- To run, secure and support the App, and to check whether the store has an active subscription.
We do not sell personal information, use it for our own advertising, or combine data from different stores.
Consent
The App uses Shopify’s customer privacy controls. It only runs for visitors who have allowed analytics, marketing and the sharing of their data, according to the store’s consent banner. If a visitor withdraws consent, the App stops collecting their activity. Events blocked while consent was missing are not sent later.
Who we share it with
- OpenAI, which receives storefront events for the merchant’s own ads account. OpenAI’s use of that data is governed by the merchant’s agreement with OpenAI and by OpenAI’s privacy policy.
- Shopify, which provides the platform the App runs on and handles billing.
- Service providers that host our servers and database, who may only use the data to provide that service to us.
- Authorities or other parties, when the law requires it or to protect our rights, users or the public.
How long we keep it
- The record that links a visitor’s ad click to their cart and checkout is deleted automatically after 30 days without activity.
- Event records and the merchant’s settings are kept while the App is installed, so reports keep working and a paused subscription can be resumed without setting up again.
- When a merchant uninstalls the App, we delete their access token straight away. We delete everything else we hold for the store when Shopify asks us to, which is 48 hours after uninstalling.
How we protect it
All connections to the App use HTTPS. Shopify access tokens and OpenAI API keys are encrypted in our database, and API keys are only ever used from our servers: they are never sent to the storefront or shown again in full. Access to our systems is limited to people who need it to run the App.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit how it is used, including under the GDPR and California privacy laws.
Shoppers should contact the store they bought from, which can pass the request to us through Shopify. Merchants can contact us directly using the details below. We will not treat you differently for using these rights.
International transfers
Our servers and OpenAI’s may be in a different country from yours, including the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses for these transfers.
Children
The App is a tool for businesses and is not directed at children. We do not knowingly collect information from children under 16.
Changes to this policy
We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell merchants in the App before it takes effect.
Contact us
Questions or requests about privacy: support@growtechapps.co
Pixoo LLC