Octolift reads your products through Shopify, sends product text to an AI provider to score it and write suggestions, and writes back only the changes you approve. It never reads your customers. This page explains the permissions, what leaves your store, what is kept and what happens when you uninstall. The privacy policy covers this website.
Which permissions does the app ask for?
| Permission | Why Octolift needs it |
|---|---|
| View and edit products | Read everything the analysis looks at (title, description, type, category and its fields, variants, media, availability), and write the title, description, category and category fields you approve. |
| View and edit metaobjects | Category field values in Shopify are entries in its taxonomy. When you pick a value your store does not have yet, Octolift creates that entry. |
| View metaobject definitions | To find out which entry type a category field uses, so a value is written to the right place. |
| View reports | To read the sales Shopify attributes to AI assistants, for agentic sales. |
| View legal policies | To see which store policies are published, and to draft Knowledge base answers from them. |
| View themes | Part of the permission set Shopify shows at install. It is read only: Octolift never changes your theme. |
Nothing is written without your approval.
What leaves your store?
Analysing a listing and writing suggestions is done by a large language model at one of three providers: OpenAI, Anthropic or Google. Octolift chooses the model; you do not. What is sent:
- The product’s title, product type, category, category field values and description, with the word count.
- For suggestions and the category check: up to four of the product’s images, at a reduced size.
- For the category check: the category’s attribute names, their current values and the values Shopify allows.
- For suggestions: the gaps the scan found, so the model writes for the checks.
- When testing how an assistant would answer: the catalog’s summary of the product and excerpts of your published policy pages.
Octolift uses these providers’ paid API tiers, whose terms state that submitted content is not used to train their models. Shopper questions are also sent to ChatGPT and Gemini, and searched in Shopify’s AI catalog, which is Shopify’s own service.
What is stored?
- Store profile: domain, name, plan, country and currency, plus the contact details Shopify gives installed apps.
- Scores: the last score of each analyzed product, with the previous one.
- Change history: for every change you apply, the field, the previous and new value, and the suggestion it came from. Kept for 30 days.
- Your questions: the questions you ask on the AI rankings page, per country, with the results of each check.
- Generated shopper questions: kept for 30 days for the Activity page.
- Usage: which products your plan covers and how many questions you have used.
- Notification addresses: up to five email addresses you set on the Settings page.
What is never read or sent?
- Individual customers. Octolift does not ask for customer access.
- Your Shopify access tokens, customer data or order data, to any model provider.
- Anything to an advertising or tracking network. There is no analytics script inside the app.
Which emails will you receive?
A welcome email on your first install, a short note when you uninstall, a notice if weekly question checks are paused for your store, and, only if you rate the app inside it, a follow up. They go to the notification addresses on the Settings page, or to your store email until you set any. Reply to any of them to reach us.
What happens when you uninstall?
- Immediately: Octolift’s access to your store is revoked and all processing stops. Nothing you applied is reverted.
- About 48 hours later: Shopify sends the request to erase your store’s data, and your scores, change history, tracked questions, generated questions and contact details are deleted. The list of products your plan has covered is kept as a billing record, without any of your product content.
To exercise a data request under GDPR or CCPA, email hello@craftshift.com.