Privacy Policy

1. Introduction

Apex Agent Labs, Inc. ("UserApproved.ai", "we", "us", or "our") operates the UserApproved.ai platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Name and contact information (email address, phone number)
• Company name and website URL
• Job title and role
• Account credentials
• Payment and billing information
• Communications with us

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Device information (browser type, operating system)
• Usage data (pages visited, time spent, features used)
• IP address and location data
• Cookies and similar tracking technologies

2.3 Website Analysis Data

Our service analyzes your website to identify conversion optimization opportunities. This may include:

• Website structure and content
• User flow and interaction patterns
• Technical performance metrics
• Synthetic user testing results

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Analyze usage patterns and optimize our platform
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., payment processing, analytics, hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@userapproved.ai.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Apex Agent Labs, Inc.

Email: privacy@userapproved.ai

Website: www.userapproved.ai

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our lawful basis for processing your data includes: consent, contract performance, legal obligations, and legitimate interests.

14. CCPA Compliance (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price

Note: We do not sell your personal information to third parties.

15. Shopify App Integration

15.1 Data Collected Through Shopify

When you connect your Shopify store to UserApproved.ai, we collect:

• Store information (shop domain, store name, contact information)
• Product catalog data (products, variants, collections, inventory levels)
• Order data (order history, transactions, fulfillments) — limited to last 60 days unless you approve read_all_orders
• Customer data (for analytics purposes)

15.2 How We Use Shopify Data

• Analyze your store's conversion funnel and identify optimization opportunities
• Generate reports and recommendations specific to your Shopify store
• Monitor performance metrics (GMV, AOV, conversion rates)
• Provide insights about customer behavior and shopping patterns

15.3 Shopify Data Security

All Shopify access tokens are encrypted using AES-256-GCM and stored securely. We follow Shopify's security best practices and only access data necessary to provide our services.

15.4 Shopify Data Retention

Active stores: data retained while your account is active. Inactive stores: data deleted within 30 days of cancellation. GDPR requests: data is deleted or exported within applicable timelines upon valid request.

15.5 Your Rights Regarding Shopify Data

• Disconnect your Shopify store at any time through your account settings
• Request export via GDPR data request (customers/data_request)
• Request deletion via GDPR redaction requests (customers/redact, shop/redact)

15.6 Uninstalling the App

On uninstall, we mark your store inactive immediately and delete store data per our retention policy. You may request immediate deletion via shop/redact.

15.7 Data Transfer and Integration (Connector App)

This app functions as a connector that transfers Shopify store data to the UserApproved.ai platform.

What data is transferred:

• Store information (shop domain, store name, contact information)
• Product catalog data (products, variants, collections, inventory levels)
• Order data (order history, transactions, fulfillments) — limited to last 60 days unless you approve read_all_orders scope. Note: Order records may contain customer information (email, name, addresses) embedded in transaction data, but we do not request access to customer records (read_customers scope).
• Checkout data (abandoned checkouts for conversion analysis) — may contain customer email, which we sanitize after collection
• Fulfillment data (to track shipping and delivery performance)
• Analytics and aggregated metrics (no personally identifiable information)
• We do NOT request access to customer records, customer events, or customer tags. All personally identifiable information (PII) is sanitized from order and checkout data after collection for privacy protection.

Where data is transferred:

All Shopify store data is transferred to and stored on the UserApproved.ai platform (operated by Apex Agent Labs, Inc.) for analysis and conversion optimization services. Data is stored in secure cloud infrastructure and may be processed in multiple geographic regions as detailed in Section 9 (International Data Transfers).

Purpose of data transfer:

• To analyze your store's conversion funnel and identify optimization opportunities
• To generate reports and recommendations specific to your Shopify store
• To monitor performance metrics (GMV, AOV, conversion rates)
• To provide insights about customer behavior and shopping patterns
• To deliver AI-powered CRO recommendations and automated audits

Geographic and API information:

Data is transferred via secure API connections to UserApproved.ai servers, which may be located in multiple geographic regions. All API communications are encrypted using TLS/SSL. By using this app, you acknowledge that your Shopify store data will be transferred to and processed by UserApproved.ai's infrastructure.

Data sharing with third parties:

UserApproved.ai does not share your Shopify store data with third parties except as described in Section 4 (Information Sharing and Disclosure) of this Privacy Policy. All data processing is performed by Apex Agent Labs, Inc. (UserApproved.ai) for the purpose of providing conversion optimization services.