This Privacy Policy explains how Orango Pte Ltd (“ShopDash”, “we”, “us”) handles personal data when merchants use the ShopDash Shopify application, visit our website, or contact us. ShopDash acts as a service provider or data intermediary for most store data processed on a merchant’s behalf. The merchant remains responsible for its own customer-facing privacy notices and lawful use of ShopDash.
1. Information we collect
Merchant account and installation data
We receive the store domain, store metadata, authorized Shopify scopes, installation tokens, staff identity data provided through Shopify, and application settings needed to operate and secure the service.
Store and commerce data
Depending on enabled features and granted scopes, we process product, variant, inventory, content, order-context, and customer-support information. The current private beta requests read access to products, inventory, and content. We do not sell merchant or customer data.
AI interactions and usage data
We process prompts, responses, source references, confidence signals, action proposals, and audit events needed to provide the product, improve reliability, prevent abuse, and support merchants.
Website and early-access data
If you reserve access, we collect your email address, optional Shopify store domain, consent record, and delivery status. We may also process standard security logs such as IP address, browser type, and request timestamps.
2. How we use information
- Provide, maintain, secure, and troubleshoot ShopDash.
- Authenticate installations and synchronize authorized Shopify data.
- Generate grounded AI answers, catalog insights, and merchant-controlled actions.
- Send requested product, onboarding, security, and service communications.
- Measure reliability, prevent fraud or abuse, and comply with legal obligations.
3. Legal basis and consent
Where applicable, we process personal data to perform our contract, pursue legitimate interests in operating a secure service, comply with law, or based on consent. You may withdraw marketing consent at any time through an unsubscribe link or by contacting us.
4. Service providers and international transfers
We use carefully selected infrastructure and service providers described on our Subprocessors page. Data may be processed outside Singapore. We take reasonable steps to require protections comparable to those required under applicable law.
5. Retention
We retain data only while needed to provide the service, meet legal requirements, resolve disputes, and enforce agreements. Shopify-required deletion webhooks are implemented. When a merchant uninstalls, we stop authorized access and process deletion or de-identification subject to legal and security retention needs.
6. Security
We use access controls, encrypted transport, secret separation, audit logging, approval gates, and least-privilege design. No system is perfectly secure. Please review our Security page and report concerns promptly.
7. Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or withdrawal of consent. Merchants should direct store-customer requests to ShopDash through Shopify’s privacy workflows or contact us so we can assist.
8. Contact
For privacy questions or requests, email our data protection contact at privacy@shopdash.ai. ShopDash is operated by Orango Pte Ltd, Singapore.
9. Changes
We may update this policy as the product or law changes. Material updates will be communicated through the service or by email where appropriate.