Privacy Policy — Vanilla AI Search

Last updated: 5 September 2026 · Operated by Vanilla Telecoms Ltd, Malta

What this app does

Vanilla AI Search provides product search for Shopify stores. To do that, it keeps a search index of the store's product catalogue (titles, handles, vendors, product types, tags, prices, availability and image URLs).

What we store

• Product data from your store, as above — refreshed automatically when products change.
• Search analytics: search terms, result counts and product clicks, kept for up to 30 days before scheduled removal. We filter likely email addresses, phone numbers and payment numbers before saving terms. Free text can still contain personal details. Events are not linked to customer accounts, IP addresses, cookies or device identifiers.
• Store settings: your plan, quotas, merchandising rules and synonyms.

What we do NOT store

• Orders, customer records and payment details are not requested from your store (the app only asks Shopify for the read_products permission).
• No tracking of individual shoppers across searches or sessions.

Where data lives

Data is processed and stored on Cloudflare's global network (Workers, D1 and Vectorize). AI features run on Cloudflare Workers AI; search text is processed to produce rankings. We use short-lived, hashed network identifiers for request limits and do not save them in the analytics database.

GDPR

• Customer data requests / erasure: search events are not linked to customer IDs. On a customer erasure notice, we remove retained search text for that store while keeping aggregate counts. Contact us for other access or erasure requests.
• Store erasure: when you uninstall, Shopify sends a shop-redact notice ~48 hours later and we queue removal of the store's index, analytics, rules, settings and uploaded files. Failed storage operations are retried. Reinstalling before cleanup starts cancels the old cleanup.

Contact

Questions or requests: helpdesk@vanilla.net.mt