AgentLens Privacy Policy

AgentLens is operated by ARO PCRM, the data controller for the information described here. Contact us at support@aro-pcrm.com.

ARO PCRM · 45 S Arroyo Pkwy, Suite 1108, Pasadena, CA 91105, USA.

Store information — your myshopify.com domain, store name and plan, and an access token that lets AgentLens call the Shopify Admin API on your behalf. If you enter an email address for audit digests, we store that address.

Store content — product titles, descriptions, tags, and handles, and online-store page titles and content. We read this to run audits and to draft optimizations, and we write to it only when you approve a specific draft.

Audit data — the shopper questions AgentLens generates from your catalog, the responses your storefront returned to those probes (including transcripts), scores, and the optimization drafts and their status.

Billing data — your subscription plan and status and, on the Enterprise plan, a count of optimizations applied each month for usage metering. Payments are processed by Shopify; AgentLens never receives your payment details.

Technical data — standard request logs needed to run and secure the service.

What we do not collect: AgentLens does not access or store your customers' personal data. It does not read customer records, orders, or checkout data, and requests only Shopify's product and online-store content permissions.

We use this information only to provide the service: auditing your storefront, drafting optimizations, applying the changes you approve, billing your plan through Shopify, responding to support requests, and keeping the service secure. We do not sell your data and we do not use it for advertising.

To draft an optimization, AgentLens sends the relevant product or page text and the related shopper questions to Anthropic's Claude API and returns the suggested rewrite for your review. Only store content is sent — never customer data. Anthropic processes this content under its commercial API terms, which do not use customer API data to train its models. Every draft is a suggestion: nothing is published to your store until you approve it.

Shopify — for authentication, billing, and webhooks, under your existing agreement with Shopify.

Anthropic — to generate optimization drafts, as described above.

DigitalOcean — hosting and a managed database in the United States.

We share data with no one else, except where required by law.

We keep your data while AgentLens is installed. When you uninstall the app, we delete your audits, settings, and drafts, and we honor Shopify's shop data-erasure request within 48 hours. Provider backups expire on a rolling basis. You can ask us to delete your data at any time at support@aro-pcrm.com.

All traffic uses TLS. AgentLens authenticates with short-lived, expiring Shopify access tokens, requests only the permissions it needs, and limits internal access to production data to what is required to operate the service.

Depending on where you are, you may have the right to access, correct, export, or delete the data we hold about your store, and to object to or restrict certain processing (including under the GDPR and CCPA). Email support@aro-pcrm.com and we will respond promptly. AgentLens also honors the data-request and erasure webhooks Shopify sends on behalf of merchants and their customers.

If we make material changes, we will update the date above and, where appropriate, notify you through the app. Continued use of AgentLens after a change means you accept the updated policy.

Questions about privacy or this policy: support@aro-pcrm.com.