Privacy policy
Last updated: September 29, 2026
Forest Book Inc. ("we") describes below how the Shopify app Smart Catalog for UCP ("the app") handles information.
Information we collect
The app collects the following information from Shopify. The only permissions it requests are to read and write products (read_products, write_products).
| Information | Details |
|---|---|
| Store information | Store name, store domain, store email address |
| Product information | Product title, description, brand, product type, category, tags, status, variants (names and prices), values in the app's product metafields, and the featured image URL, alt text, and image count (for display) |
| Authentication information | The access token used to call Shopify's APIs |
| App settings | Display and notification language, welcome email preference |
| Support requests | The reply-to email address, category, and message entered in the contact form |
Information we don't collect
- Order information
- Customers' (buyers') personal information
- Payment information
Product images themselves are never sent to AI or stored.
How we use information
- To calculate and display each product's AI Readiness Score
- To create AI suggestions and save the fields you select to product metafields (and, if you choose, append them to the end of the product description)
- To send messages about the app, such as the welcome email
- To respond to support requests
- To investigate issues, prevent misuse, and improve the service
Information we store
The app stores management data for each product, such as its score, verdict, and last-updated time. It doesn't store the text of your product titles or descriptions (excerpts of product information are kept for 24 hours only, as the basis for AI suggestions).
| Information | Retention |
|---|---|
| Management data for each product, such as scores | Until you uninstall |
| Records of deleted products | 7 days after deletion |
| AI suggestions (field values and the excerpts of product information they're based on) | 24 hours after creation |
| Records of AI generation counts | 3 days |
| App settings and store information | Until Shopify sends the store data deletion request, about 48 hours after you uninstall |
| Access token | Until you uninstall |
| Operational logs (store domain, request identifiers, error details) | 30 days |
| Records of email addresses that bounced or complained (hashed) | No expiry (to stop sending to them) |
| Support requests | Not stored by the app. They arrive as email at our support inbox |
Deleted information remains in backups kept for disaster recovery for a limited time.
Suggestions you apply are saved in your store's product metafields, not by the app. For what happens after you uninstall, see Uninstalling and your data.
Sharing with external services
We send information to external services only as far as needed for the purposes below. We never sell your information.
| Recipient | Purpose | Information sent |
|---|---|---|
| OpenAI (OpenAI API) | Creating AI suggestions | Information about the product you're creating a suggestion for, and your store domain |
| Amazon Web Services (Tokyo region) | Running the app, storing data, sending email | The information described on this page |
| Shopify | Saving to product metafields and providing the app | The suggestion values you choose to apply (and, if you choose, the content appended to the product description) |
If we change the AI service provider, we'll update this page.
AI suggestions are created only when you press Optimize with AI or Regenerate. The app never sends your product information directly to Muse or any other AI shopping service.
Except where required by law, we don't provide information to any other third party.
Deleting data
- When you uninstall, the app deletes the management data for each product and the access token.
- When Shopify sends a store data deletion request (shop/redact), the app deletes the store data it holds, including your app settings, except records of AI generation counts (deleted automatically after 3 days) and email suppression records.
- The app doesn't store customers' personal information, so there's no data to provide or delete in response to customer data requests (customers/data_request, customers/redact).
If you'd like your data deleted sooner, or want to check what information we hold, contact us at the address below.
Security
Communication is encrypted (HTTPS), and stored data is encrypted as well. Secrets such as the AI service's API key are managed in AWS's secrets storage service and can be read only by the processes that need them. Sensitive information such as email addresses is masked in operational logs.
Changes to this policy
If we change this policy, we'll publish the changes on this page along with the last-updated date.
Contact
Forest Book Inc. Email: info@forest-book.jp