1. Introduction
This Privacy Policy describes how OXIVOLT Bulk Editor (the “App”), operated by HIGH LEVEL CPA LLC (“we”, “us” or “our”), collects, uses, shares, stores and deletes information when a Shopify merchant (“you”) installs and uses the App.
The App is a product-management tool. It works with your store’s product data only. It does not request access to, collect, store or process your customers’ personal data (such as names, addresses, emails or orders).
Questions about this policy can be sent to support@highlevelcpa.shop.
2. Information we access
When you install the App you grant it the following Shopify Admin API permissions (“scopes”). The App uses them only to perform actions you start.
| Scope | What it allows | Why the App needs it |
|---|---|---|
read_products | Read your products. | To list products and read the fields you edit (see below). |
write_products | Update your products. | To save bulk edits, AI-generated content, categories and restores. |
read_inventory | Read inventory levels. | To show and record current stock quantities. |
write_inventory | Update inventory levels. | To set the inventory quantity you choose. |
read_locations | Read your store locations. | To find the location where inventory quantities are set. |
Through these scopes the App may read the following product information:
- Product ID, title, vendor, product type, status, tags, description, URL handle, SEO title and description, and product category.
- The product’s featured image URL.
- The first variant’s price, inventory quantity and inventory item ID.
- Your store’s locations (to identify the first active location for inventory updates).
The App also receives your store domain (for example your-store.myshopify.com) and a Shopify access token when you install it, and short-lived Shopify session tokens each time you open it.
3. How we use your information
We use the information described above only to provide the App’s features to you:
- Displaying products in the App so you can search, filter, select and export them (CSV export is generated in your browser).
- Bulk editing the vendor, price and inventory quantity of the products you select.
- AI-assisted content: generating titles, descriptions, SEO fields, URL handles, tags and product categories when you click an AI button (see section 4).
- Edit history, undo and restore: recording what changed and the previous values so you can review and revert edits.
- Plans and limits: checking your plan, enforcing the per-operation product limit and counting products processed each month.
- Security and troubleshooting: verifying requests and keeping technical error logs.
We do not sell or rent your information, do not use it for advertising, and share it only with the service providers listed in section 5 as needed to run the App.
4. AI-assisted features
AI processing happens only when you click an AI button in the App (Generate titles, Generate descriptions, Generate SEO & URL handle, Generate tags, Set product category, or Run all with AI) and only for the products you selected. For each product, the App sends the following to an AI provider:
| Operation | Text sent | Product image sent? |
|---|---|---|
| Generate titles | Title, vendor, product type, category, first 500 characters of the description | Yes, if available |
| Generate descriptions | Title, vendor, product type, category, first 800 characters of the description | Yes, if available |
| Generate tags | Title, vendor, product type, category, first 500 characters of the description | Yes, if available |
| Generate SEO & URL handle | Title, vendor, product type, category, first 600 characters of the description | No (text only) |
| Run all with AI (title, description, SEO, tags) | Title, vendor, product type, category, first 700 characters of the description | Yes, if available |
| Set product category | Title, product type, first 600 characters of the description | Yes, if available |
Product images
When an operation uses an image, our server downloads the product’s featured image from its Shopify URL and sends it to Google Gemini. Images are only sent if the product has a featured image and the file is 4 MB or smaller. Images are never sent to the backup provider (Abacus.AI).
What is never sent to AI providers
- Prices or any other monetary amounts.
- Inventory quantities or location data.
- Your Shopify access token or session tokens.
- Customer personal data (the App does not access it).
Which AI providers are used
- Google Gemini (Gemini API by Google) is the primary provider and processes text and images.
- Abacus.AI RouteLLM is a backup used only if all Gemini requests fail. It receives the text listed above only, never images.
AI-generated results are written directly to your Shopify products and recorded in the App’s edit history, so you can review and restore them.
5. External service providers
We rely on the following third parties to operate the App:
| Provider | Purpose | Data involved | Privacy information |
|---|---|---|---|
| Shopify | E-commerce platform, App authentication and billing | All App interactions with your store | Shopify Privacy Policy |
| Google (Gemini API) | Primary AI provider | Product text and images listed in section 4 | Google Privacy Policy Gemini API Terms |
| Abacus.AI (RouteLLM) | Backup AI provider, used only if Gemini fails | Product text listed in section 4 (no images) | Abacus.AI Privacy Policy |
| Railway | Application hosting | The App and the data it stores (section 6) | Railway Privacy Policy |
Each provider processes data under its own terms and privacy policy, which may apply different rules depending on the service tier used. These providers may process data in the United States and other countries.
6. Data we store
The App stores the following records in its database, keyed by your store domain:
| Record | Contents | Purpose |
|---|---|---|
| Shop session | Store domain, Shopify offline access token, granted scopes, token expiry time, install and update timestamps | Lets the App call the Shopify API on your behalf |
| Billing record | Store domain, Shopify installation ID, date you selected the Free plan, Shopify subscription ID and status, pending subscription ID and plan, result and date of the last charge approval | Remembers your plan choice and tracks plan approvals |
| Edit log | Product ID and title, a description of each change, a snapshot of the previous values (for example title, description, vendor, status, type, tags, SEO fields, URL handle, category, price and inventory quantity), success or error message, undo status and timestamps | Powers Edit history, undo and restore |
| Usage counter | Store domain, calendar month (UTC) and number of products processed | Shows monthly usage in the App |
The App does not store copies of product images, AI prompts or customer information. It also keeps a short-lived in-memory cache of your plan status to reduce calls to Shopify. Technical error logs kept by our hosting provider may occasionally include product identifiers or short excerpts of AI responses.
7. Billing and payments
- Paid plans (Pro Monthly and Pro Annual) are charged through Shopify’s Billing API. You approve each subscription on Shopify’s confirmation page, and charges appear on your Shopify invoice.
- The App never receives, processes or stores payment card or bank details. All payment processing is handled by Shopify.
- Your active subscription is always checked live with Shopify. The App only stores the billing identifiers and statuses listed in section 6.
- Development stores may receive test charges, which are not billed.
- You can change or cancel your plan at any time from the App. Shopify cancels the App’s subscription when you uninstall the App.
8. Data retention and deletion
While the App is installed, we keep the records described in section 6 so the App can work and so that Edit history and Restore are available.
| Event | What is deleted | What is kept |
|---|---|---|
| You uninstall the App | Shop session (including the access token) and billing record; the cached plan status is cleared | Edit logs and usage counters, until Shopify sends the shop data-erasure request |
| Shopify shop data-erasure request (shop/redact), sent by Shopify 48 hours after uninstall | All remaining data for your store: edit logs, shop session, usage counters and billing record | Nothing |
To request access to or deletion of your store’s data at any other time, contact us at support@highlevelcpa.shop. Data already sent to AI providers is retained according to those providers’ policies (see section 5).
9. GDPR and compliance webhooks
The App implements Shopify’s mandatory privacy compliance webhooks. Each request’s HMAC signature is verified, and invalid requests are rejected.
customers/data_request— acknowledged. The App holds no customer personal data, so there is nothing to return.customers/redact— acknowledged. The App holds no customer personal data, so there is nothing to erase.shop/redact— deletes all data stored for the store, as described in section 8.
Depending on where you are located, you may have rights to access, correct or delete personal data. Contact us to exercise them.
10. Data security
- All communication with Shopify, AI providers and your browser uses encrypted HTTPS connections.
- Requests from inside the Shopify admin are authenticated with Shopify session tokens, whose signatures are verified by the App’s server.
- OAuth installation callbacks and webhooks are verified with Shopify HMAC signatures.
- Access tokens are kept server-side in the App’s database, never in your browser, and access to the database is restricted.
No method of transmission or storage is completely secure, but we work to protect your information.
11. Merchant responsibilities
- Review AI-generated content. AI output can be inaccurate or incomplete. You are responsible for the product titles, descriptions, SEO fields, tags and categories published on your store.
- Avoid confidential information in product data you process with AI tools, because it is sent to the AI providers listed above.
- Check URL handle changes. Generating SEO & URL handles changes product web addresses; set up redirects in Shopify where needed.
- Keep your own backups (for example with Export CSV) before large changes.
Learn more
See the User Guide for how each AI tool works and the FAQ for common privacy questions.
12. Changes to this policy
We may update this Privacy Policy when the App or our providers change. Updates are posted on this page with a new “Last updated” date.
13. Contact us
HIGH LEVEL CPA LLC
Email: support@highlevelcpa.shop
Please include your store domain so we can locate your data.