Privacy Notice

Shoplist Inc. ("Shoplist," "we," "us," or "our") provides B2B intelligence about the Shopify ecosystem. You can contact us about privacy at privacy@shoplist.co.

This Privacy Notice applies to our website, dashboard, APIs, exports, reports, alerts, support, sales interactions, and related services. It does not replace a signed data processing addendum or other written agreement that expressly controls a specific customer relationship.

We collect information you provide directly, including name, work email, employer, role, workspace details, account settings, support messages, demo requests, billing details, survey responses, and communications with us.

Payment card details are handled by Stripe or our payment processors. We may receive billing status, subscription, invoice, address, tax, and payment metadata from those processors, but we do not need or intend to store full card numbers.

Customers may submit data to Shoplist, including lists, saved searches, imports, prompts, notes, CRM or workflow data, integration metadata, workspace membership, and configuration choices ("Customer Data").

We process Customer Data to provide, secure, support, troubleshoot, maintain, and improve the Services; to comply with law; and to enforce our terms. We do not sell Customer Data. We do not intentionally use Customer Data to train public AI models.

We collect information about how people access and use the Services, including IP address, device and browser details, pages viewed, actions taken, searches, exports, API activity, feature usage, referring pages, approximate location, timestamps, logs, diagnostic data, and security signals.

We use cookies and similar technologies for login, security, preferences, analytics, performance, and measurement. See our Cookie Notice for more detail.

Shoplist data products may include business information about companies, brands, app developers, apps, storefronts, agencies, experts, and related contacts. Depending on the source and surface, this may include business names, domains, public profiles, roles, business email addresses, business phone numbers, social URLs, locations, app-store listings, review and pricing signals, install evidence, category signals, portfolio context, and derived or inferred business attributes.

We build and update these data products from public websites, public Shopify ecosystem pages, storefront and app-store signals, productized ecosystem sources, third-party providers, customer-directed integrations, user feedback, and internal research. Some fields are observed, some are detected, and some are inferred or estimated. See our Data Methodology for how we describe evidence quality.

We use personal information to:

• provide, operate, secure, and improve the Services;
• create accounts, authenticate users, and manage workspaces;
• process subscriptions, billing, invoices, taxes, and support;
• build, refresh, label, verify, and improve Shoplist data products;
• power search, lists, exports, APIs, alerts, reports, and analytics;
• respond to sales, support, security, and privacy requests;
• monitor abuse, enforce terms, protect rights, and prevent fraud;
• send service, product, security, billing, and marketing messages;
• measure website and product performance; and
• comply with legal, accounting, tax, and regulatory obligations.

Some features may use AI providers to analyze prompts, data, documents, search context, summaries, or other inputs and outputs. We use AI providers to provide and improve the Services under our provider settings, contracts, and safeguards.

AI output may be inaccurate or incomplete. Do not submit sensitive personal information to AI features unless the product expressly supports that use and you have the right to do so.

We may share information with:

• service providers and subprocessors that host, secure, analyze, support, email, bill, process payments, provide AI features, or operate the Services;
• integrations and third-party tools you connect or direct us to use;
• customers and users who access Shoplist data products under the applicable plan and license restrictions;
• professional advisors, auditors, insurers, banks, and legal representatives;
• authorities, regulators, courts, or third parties where required by law or needed to protect rights, safety, security, and compliance;
• parties involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets; and
• others with your consent or at your direction.

Where laws such as the GDPR or UK GDPR apply, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of rights and safety. Our legitimate interests include providing B2B intelligence, securing the Services, preventing abuse, improving data quality, supporting customers, and running our business.

Depending on where you live and how we process your information, you may have rights to access, correct, delete, port, object to, restrict, or opt out of certain processing of personal information. You may also have the right to appeal a decision or use an authorized agent.

You can submit a request at shoplist.co/data-request or email privacy@shoplist.co. We may need to verify your identity, authority, jurisdiction, or connection to the data before acting on a request.

If you believe Shoplist has business contact or profile information about you or your company, you can request access, correction, removal, suppression, or opt-out by using Data Requests or emailing privacy@shoplist.co.

We may retain limited suppression records so that removed information does not reappear in later refreshes. We may also retain information where required or permitted for legal, security, abuse-prevention, recordkeeping, or legitimate business purposes.

Some U.S. privacy laws define "sale," "share," or "targeted advertising" broadly. Depending on the law, our data-product licensing, website analytics, or advertising technologies may be considered a sale, sharing, or targeted advertising.

You can request to opt out through Data Requests. Where required, we honor recognized browser-based opt-out preference signals, such as Global Privacy Control, for the browser and device that send the signal.

You can unsubscribe from marketing emails by using the unsubscribe link in the email or contacting us. We may still send transactional, security, billing, account, and service messages.

We keep personal information as long as needed for the purposes described in this notice, including to provide the Services, maintain accounts, improve data quality, keep suppression records, resolve disputes, enforce agreements, maintain backups, comply with law, and support legitimate business needs.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No security method is perfect, so we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly at support@shoplist.co.

Shoplist is based in the United States, and we and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

The Services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child provided personal information to Shoplist, contact privacy@shoplist.co.

We may update this notice as the Services, law, and our practices change. The updated date shows when the latest version took effect.

Privacy questions and requests can be sent to privacy@shoplist.co. You can also use the Data Request page.