Privacy Policy

Milly - AI Search — Last updated: July 27, 2026

Milly ("the App", "we", "us") is a Shopify application that provides AI-powered search for your storefront. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you install and use Milly, we collect:

• Shop access token and session data — stored in our database to authenticate API calls on your behalf. This includes your shop domain, access token, and token scope.
• Product catalog data — titles, descriptions, images, and other product information, indexed to power search results on your storefront.
• Search queries — terms your customers search for, used to improve search relevance and provide you with analytics.
• Order data — when an order includes a product added to cart through the App, we record the order ID, order value, currency, and whether the AI chat or the regular search results drove that add-to-cart. This is used solely to show you which surface is generating sales; we do not read or store the customer's name, email, phone number, or address from the order.

We do not collect or store customer personal information (names, emails, addresses, or payment data).

2. How We Use Your Data

• To authenticate your Shopify store and read your product catalog.
• To build and serve an AI-powered search index for your storefront.
• To provide you with search analytics, relevance improvements, and order attribution (which surface — AI chat or search results — drove a sale).

3. Third-Party Services

Product data may be processed by third-party AI providers to generate search embeddings. We do not sell or share your data with third parties for advertising.

4. Data Retention

• All session, product index, settings, and analytics data is permanently deleted within 48 hours of uninstall, in response to Shopify's shop/redact webhook.
• Independent of uninstall, analytics event data (search queries, clicks, order attribution) is automatically purged after 400 days.

5. GDPR & Your Rights

We hold shop session tokens, product catalog data, anonymized search queries, and order attribution data (order ID, order value, currency, and AI-vs-search-results source). To exercise any rights or request deletion, contact us below.

6. Security

All data is transmitted over HTTPS and access tokens are stored securely.

7. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects any changes. Continued use of the App after changes constitutes acceptance of the updated policy.

8. Contact

For privacy questions or data requests, contact us at: ggman.kr@gmail.com