Privacy Policy
Last updated: June 7, 2026
Hexel ("we", "our", "us") is a Shopify application that helps merchants build and optimize their online stores. This Privacy Policy describes how we collect, use, and protect your information when you use our app.
1. Information We Collect
When you install and use Hexel, we collect the following information:
- Shop information: Your Shopify store domain, store name, and Shopify access tokens required to operate the app.
- Theme configuration: Your selected theme style, color preferences, cart drawer settings, bundle configurations, and quantity tier settings.
- Product data: Product titles, descriptions, images, and pricing that you choose to process through our AI content generation features.
- Landing page data: Content and configuration for landing pages and store pages generated through the app.
2. Information We Do NOT Collect
- We do not collect customer personal information (names, emails, addresses, payment details).
- We do not collect order or transaction data.
- We do not use cookies to track your customers.
- We do not sell or share any data with advertisers.
3. How We Use Your Information
- App functionality: To deploy theme sections, generate landing pages, configure cart drawers, and manage bundles on your Shopify store.
- AI content generation: Product data you submit is sent to Anthropic (Claude AI) to generate optimized product descriptions, landing page copy, and homepage content. This data is processed in accordance with Anthropic's terms of service and is not used to train their models.
- Theme customization: To apply your selected design preferences (colors, typography, layout) to your Shopify theme.
4. Third-Party Services
Hexel uses the following third-party services:
- Anthropic (Claude AI): Product information you submit for AI content generation is processed by Anthropic's Claude API. Anthropic's privacy policy applies to this processing. We send only the product data you explicitly choose to process — no customer data is ever sent to Anthropic.
- Shopify: We interact with Shopify's APIs to manage your store's themes, products, and pages. Shopify's privacy policy governs their handling of your store data.
5. Data Storage and Security
- Your configuration data is stored securely on our servers.
- Shopify access tokens are stored securely in our database and are never exposed to third parties.
- We use HTTPS/TLS encryption for all data in transit.
- We verify all Shopify webhook signatures using HMAC-SHA256 to prevent unauthorized access.
6. Data Retention and Deletion
- Your data is retained as long as the app is installed on your store.
- When you uninstall Hexel, your session data is immediately deleted.
- Within 48 hours of uninstallation, all remaining shop configuration data (cart settings, bundle settings, theme preferences, landing pages) is permanently deleted in compliance with Shopify's GDPR requirements.
- You can request data deletion at any time by contacting us (see below).
7. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of all data we store about your shop.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of all your data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Restriction: Request that we limit processing of your data.
To exercise any of these rights, contact us at the email below.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.
9. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: support@hexelai.com