Privacy Policy

Last updated: October 2026 · ← back to lensagent.app

What LensAgent does

LensAgent attributes a merchant's Shopify orders and storefront traffic to AI shopping agents (e.g. ChatGPT, Perplexity, Google AI Mode) so merchants can measure revenue from that channel.

What personal data we process, and why

• Shopify access tokens — to call the Shopify Admin API on the merchant's behalf. Stored encrypted at rest (AES-256-GCM); deleted on uninstall.
• Order-level attribution data — order number, totals, currency, line-item titles/quantities, checkout token, referring/landing URLs, UTM parameters — used solely to attribute orders to traffic sources. We do not store customer names, emails, addresses, phone numbers, or payment data.
• Storefront session signals — captured by our web pixel via Shopify's Customer Events API: random session ID, landing page, referrer, UTM parameters, user-agent string. The pixel respects customer consent choices and sets no cookies of its own.

Purposes

All processing is limited to providing the app: the attribution dashboard, per-agent analytics, and order tags in Shopify admin. We do not use personal data for advertising, profiling, AI/ML training, or any secondary purpose. We do not sell personal data or share it with third parties for their own purposes; data is processed only by our contracted subprocessors (hosting, database) under data protection agreements. Processing on Shopify's platform is covered by Shopify's Data Processing Addendum.

Retention

• Raw pixel session data: automatically purged after 90 days.
• Order-level attribution data: automatically purged after 24 months.
• All shop data is deleted on uninstall or on Shopify's shop redaction request. Merchants can request deletion at any time.

Security

TLS 1.2+ in transit (webhooks, Admin API, app URL, database). Encrypted storage volumes at our hosting/DB providers plus application-level AES-256-GCM encryption of access tokens. Webhooks are HMAC-SHA256 verified.

Automated decision-making

We make no automated decisions about individual customers with legal or significant effects. The app only produces analytics for the merchant.

Your rights

Merchants and their customers can request access, correction, or deletion by contacting us or by uninstalling the app (which deletes all associated data). Customer consent and opt-out choices — including opt-out of sale (we do not sell data) — are respected via Shopify's consent APIs.

Contact

Data protection contact: privacy@lensagent.app