​

Who operates this app

Pcnaid Inc. operates SwiftPage for Shopify merchants. Questions and privacy requests can be sent to support@pcnaid.com.

​

Data we process

• Store domain, installation scopes, encrypted Shopify access and refresh tokens, and subscription/plan status needed to authenticate the app and enforce its plan.
• Shop owner and collaborator identities and roles used to control who can edit pages.
• Landing-page content you build: titles, handles, SEO fields, section layouts, reusable blocks, funnels, localizations, and page-version history.
• Pseudonymous storefront visitor identifiers (a random ID stored in the visitor’s browser and reused across their page views on your store) and the page-view/conversion events tied to it, used for page analytics — no name, email, or other directly identifying customer data is included.
• In-app support messages: the email address and text you submit through the app’s support form.
• Technical request, error, release, and performance information. Structured logs redact tokens and sensitive query values.

We do not request Shopify customer or order data access scopes, and do not store payment-card details. A customer email can appear transiently in a signed Shopify data-request webhook, but this app does not persist that email outside of fulfilling the request.

​

Why and where data is processed

We process this data to build, publish, and measure landing pages; to generate optional AI-drafted page copy and layouts from the product description you provide; and to provide billing, security, support, abuse-prevention, and legal-compliance functions. Shopify supplies the commerce data (products, files, content, metaobjects) and remains the source of truth for your store.

Data is shared only as needed with Shopify, and with infrastructure/processing vendors used to operate the app: Cloudflare (hosting, storage, and the Workers AI model that drafts page copy and layouts from your prompts), Sentry (error monitoring), PostHog (product analytics), and Datadog (performance monitoring). We do not sell personal data or use it for targeted advertising.

If you enable outbound webhooks (a Scale/Agency feature), the app sends your store domain and page metadata (title, handle, Shopify page ID, or experiment data) to the URL you register for that webhook. You control that URL and are responsible for how its operator handles the data it receives — it is not one of the processors listed above.

If a page uses a 3D-model section, the storefront theme loads the model-viewer library from unpkg.com, a third-party CDN — that visitor’s browser sends request metadata (including IP address) directly to unpkg, outside our own infrastructure.

​

Retention and deletion

• Storefront page-view and conversion events are retained for 90 days, then purged by a daily scheduled job.
• Page content, settings, collaborator identities, and subscription history remain after uninstall until a permitted shop-redaction purge; trial-use and prior-subscription markers remain during that interval and are deleted with the subscription record when the purge completes.
• Uninstall marks the shop uninstalled and resets its subscription to Free without purging its records. The customers/redact handler returns zero deleted records because storefront analytics are not linked to Shopify customer identities. After a shop/redact request and verified uninstall state, a guarded purge deletes the shop’s application records, including pages, page versions, storefront events, collaborators, subscription history, and support messages. Requests that cannot be bound to an uninstall are returned for retry; pending requests are also rechecked by scheduled cleanup. A hashed redaction-delivery receipt with receipt time, installation time, and uninstall-state evidence remains after the purge.
• Backup copies age out under the infrastructure retention schedule and are not used to resume normal processing after a valid deletion request.

​

Processing locations and transfers

The app does not offer a merchant-selectable data-residency region. Shopify, Cloudflare, Sentry, PostHog, and Datadog may process data in countries where they or their subprocessors operate, including outside the merchant’s or individual’s country. Applicable transfer safeguards and processing terms depend on the deployment and jurisdiction. Contact the privacy address above for current information relevant to a request.

​

Your choices and rights

Depending on location, merchants and individuals may request access, correction, deletion, restriction, objection, or a portable copy of covered personal data. Send the store domain, request type, and a safe way to verify authority to the support address above. Do not email access tokens, passwords, or payment data.

​

Changes

We may update this notice as the product or legal requirements change. The effective date above identifies the current version. Material changes will be presented through an appropriate merchant-facing channel.