Privacy Policy
Effective date: 7 August 2025
This Privacy Policy explains how BIZARRE ADVENTURE LTD. (“Company”, “we”, “us” or “our”) collects, uses, discloses and otherwise processes Personal Data in connection with your installation and use of the Shopify application ProfitPilot (the “App”) and our related services.
1. Who We Are
Controller: BIZARRE ADVENTURE LTD.
Company Number (EIK): 208096271
Registered Address: ul. Rodopi 26, fl. 3, Central District,
4000 Plovdiv, Bulgaria
Email: sergiycheban1499@gmail.com
2. Definitions
- “Personal Data” means any information relating to an identified or identifiable natural person.
- “Merchant” means a Shopify store owner who installs the App.
- “Shop Data” means data belonging to the Merchant’s Shopify store (e.g., orders, products, cart contents) that is accessed through Shopify APIs.
3. Personal Data We Collect
Data we obtain from Shopify
- Store Information – store name, myshopify.com domain, contact email, owner name.
- Order Data – order IDs, item SKUs, quantities, prices and revenue totals.
- Cart Data – product IDs, variants, quantities, prices.
Data we generate or log
- Usage Metrics – widget impressions, clicks, upsell conversions, revenue generated by the App.
- Technical Logs – IP address, user‑agent, timestamps, error traces.
Data you provide voluntarily
- Support Communications – messages you send via Tawk.to live chat or email.
4. How We Use Personal Data & Legal Bases
| Purpose | Data | Legal Basis (GDPR) |
|---|---|---|
| Provide core App functionality & generate upsell recommendations | Store Info, Order Data, Cart Data | Performance of a contract (App Terms) |
| Analytics and product improvement | Usage Metrics, Technical Logs | Legitimate interests (Art. 6 (1) f) |
| Customer support & troubleshooting | Support Communications, Technical Logs | Legitimate interests; compliance |
| AI‑generated recommendations | Cart Data (sent pseudonymously to OpenAI API) | Legitimate interests; performance of a contract |
5. When We Share Personal Data
- Service Providers. We use vetted providers strictly to operate the App:
- Shopify Inc. – hosting & authentication.
- OpenAI LLC – AI recommendation engine.
- Tawk.to Inc. – live chat support.
- Infrastructure & database hosting (e.g., Vercel, AWS) where App servers run.
- Legal or Compliance Reasons. To competent authorities or advisors when required by law or to defend legal claims.
- Business Transfers. In connection with a merger, acquisition or sale of assets, provided the successor entity assumes the obligations of this Policy.
6. Cookies & Tracking
The App script running in your storefront does not set cookies or use localStorage. We may, however, use server‑side logs and Shopify’s first‑party analytics to measure App performance. If we introduce browser‑based tracking in the future, this Policy will be updated accordingly.
7. Security & Data Retention
We employ industry‑standard security controls (encryption in transit, network isolation, access controls) to protect Personal Data. No method of transmission is 100 % secure; therefore we cannot guarantee absolute security.
We retain Personal Data only for as long as necessary to fulfill the purposes described above, resolve disputes, enforce agreements, or comply with legal obligations. Usage logs and metrics are normally deleted or anonymised after 24 months.
8. International Transfers
Our primary servers are located in the European Union. When we transfer Personal Data to countries outside the EEA (e.g., the United States to OpenAI or Tawk.to), we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
9. Your Privacy Rights
GDPR (EU/EEA)
You have the right to access, correct, delete, restrict or object to the processing of your Personal Data, and the right to data portability. To exercise any of these rights, email us at sergiycheban1499@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.
CCPA (California)
California residents may request disclosure of categories of Personal Data collected, request deletion of Personal Data, and opt‑out of any “sale” of Personal Data (we do not sell data). Requests can be made via email.
10. Children
The App is not directed to individuals under the age of 16. We do not knowingly collect Personal Data from children. If you believe that a child has provided us with Personal Data, please contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. Any material changes will be posted at this URL and, where appropriate, notified via the Shopify App admin or email.
12. Contact Us
If you have questions or requests regarding this Privacy Policy or our privacy practices, please email sergiycheban1499@gmail.com or write to:
BIZARRE ADVENTURE LTD.
ul. Rodopi 26, fl. 3,
4000 Plovdiv, Bulgaria