AnotherDev - Search and Filters: Privacy policy

AnotherDev - Search and Filters (the “App”, “we”, “us”, or “our”), provided by AnotherDev, is a search and product-filtering application for merchants using the Shopify platform. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

By installing or using the App, you agree to this Privacy Policy.

1. Who this policy covers

• Merchants: Shopify store owners who install and use the App.
• Store visitors (end customers): people who search or filter on a merchant’s storefront where the App is active.

2. Information we collect

From merchants (via the Shopify Admin API, read-only):

• Catalog data used to build and maintain the search index: product and variant IDs, titles, descriptions, vendors, product types, tags, SKUs, options, images, and metafields, together with your collections.
• Store identity: your .myshopify.com domain and store details returned by Shopify.
• Configuration you create in the App: search and filter settings, facet configuration, synonyms, merchandising rules (pin, boost, bury, hide, and redirects), appearance settings, and your subscription plan.

The App requests only read-only Shopify scopes, and only for the catalog data it needs to run search, filtering, and recommendations. The App never writes to your products, collections, theme, or any other store data. It requests no customer scopes and no order scopes, and it stores no customer personal data.

From store visitors (end customers):

• Anonymous search analytics only. When a shopper searches or filters, we record the search terms entered and engagement events such as result clicks and add-to-cart taps, and, only if the merchant enables purchase attribution, conversion events. Each event is stored with a search or event identifier and a timestamp.
• A randomly generated browser token is attached to events to group a single session. It is not linked to any personal identity and is removed (nulled) after 24 hours.
• We do not collect names, email addresses, physical addresses, IP-based profiles, or payment information from store visitors, and we store no customer identifiers.

Semantic and visual search (optional): If the merchant enables semantic (meaning-based) or image-based search, product text and, for image search, an image the shopper submits, are sent to a third-party embeddings provider (Voyage AI or OpenAI, depending on configuration) to generate the vector embeddings used for similarity matching. These features are off by default.

Cookies & local storage: The App uses only the anonymous session token described above to group a shopper’s events. We do not use third-party advertising or cross-site tracking cookies.

From visitors who contact us through this website:

• When you contact us through anotherdev.in, we collect the name, email address, and message you provide, and use them only to respond to your enquiry.

3. How we use information

• To provide and operate the App (build the search index, return search and filter results, power recommendations, and apply your merchandising and settings).
• To generate performance analytics for merchants (top searches, zero-result searches, click-through, add-to-cart, and revenue where enabled).
• To enforce plan features and limits.
• To provide support and respond to enquiries.
• To maintain security, prevent abuse, and comply with legal obligations.

We do not sell personal information, and we do not use store-visitor data for advertising.

4. Legal bases (EEA/UK)

Where GDPR applies, we process data to perform our contract with the merchant, for our legitimate interests in operating and improving the App, and to comply with legal obligations.

5. How information is shared (subprocessors)

We share data only with service providers that help us run the App:

• Shopify: the platform the App runs on (data flows through Shopify’s APIs and app proxy).
• Railway: application hosting.
• Supabase: PostgreSQL database storage (Singapore, ap-southeast-1).
• Voyage AI or OpenAI: generating vector embeddings, only when the merchant enables semantic or image-based search.

These providers process data on our behalf under their own security and privacy terms. We do not otherwise sell or rent data. We may disclose information if required by law.

6. Data storage & security

• Data is stored in a hosted PostgreSQL database (Supabase, ap-southeast-1) and transmitted over encrypted connections (HTTPS/TLS).
• Requests from your storefront to the App are verified using Shopify’s signed app-proxy requests (HMAC).
• We restrict access to stored data to what is necessary to operate the App. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

7. Data retention & deletion

• We retain merchant data and the search index while the App is installed. Search-event analytics are retained for up to 180 days by default.
• The anonymous session token attached to storefront events is removed after 24 hours.
• When you uninstall the App, we delete your store’s data. In line with Shopify’s requirements, we honor the shop/redact request and erase all remaining data for the store.
• Because we do not store personal data about individual store customers, the customers/data_request and customers/redact privacy webhooks contain no personal data for us to return or delete; we acknowledge them as required.

8. Your rights

Depending on your location (e.g., GDPR, UK GDPR, CCPA/CPRA), you may have the right to access, correct, delete, or restrict processing of your personal data, and to data portability. Merchants can exercise most of these by uninstalling the App (which triggers deletion) or by contacting us. To make a request, use the contact form at anotherdev.in/support.

Store visitors who wish to inquire about data should contact the merchant whose store they visited; the merchant can relay the request to us.

9. International transfers

Your information may be processed in countries other than your own (including Singapore, where our database is hosted, and wherever our other subprocessors operate). Where required, we rely on appropriate safeguards for such transfers.

10. Children’s privacy

The App is not directed to children and does not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date.

12. Contact us

AnotherDev
Contact us: anotherdev.in/support
Website: https://anotherdev.in