← Back to aidunn.com

Privacy Policy

Last updated: April 12, 2026

Who we are

Aidunn is operated by Heimegut AS, a Norwegian company. Our application is available at app.aidunn.com.

What data we collect

When you use Aidunn, we collect and process the following data:

• Account information: Your name, email address, and hashed password (we never store passwords in plain text).
• Shopify store data: Product catalog information (titles, descriptions, prices, images, metafields, variants) accessed via the Shopify Admin API with your explicit authorization.
• Usage data: Actions performed in the application are logged in an audit log (who did what, when) for security and accountability.
• Session data: We use secure, HTTP-only cookies to maintain your login session.

What we do NOT collect

• We do not access customer data, order data, or payment information from your Shopify store.
• We do not use tracking pixels, analytics tools, or third-party advertising.
• We do not sell or share your data with third parties.

How we use your data

• To provide the Aidunn service: health checks, AI enrichment, price comparison.
• To send transactional emails (account invitations, password resets) via Resend.
• To improve the service based on aggregated, anonymized usage patterns.

Data storage and security

• All data is stored in a PostgreSQL database hosted on Railway (EU/US infrastructure).
• Shopify API tokens are encrypted at rest using AES-256-GCM encryption.
• Passwords are hashed with bcrypt (12 rounds).
• All connections use HTTPS/TLS encryption in transit.
• Sessions are stored server-side with HTTP-only, secure cookies.

Third-party services

• Shopify: We access your store data via the Shopify Admin API using OAuth authorization you explicitly grant.
• Anthropic (Claude): Product data is sent to Claude AI for generating descriptions and SEO content. Anthropic does not use this data for training.
• Resend: Used to deliver transactional emails (invitations, password resets).
• Railway: Application and database hosting.

Your rights

You can at any time:

• Request a copy of your data.
• Request deletion of your account and all associated data.
• Revoke Aidunn's access to your Shopify store by uninstalling the app.

Data retention

We retain your data for as long as your account is active. If you request deletion, we remove all personal data and Shopify tokens within 30 days. Anonymized audit logs may be retained for security purposes.

Contact

For privacy-related questions, contact us at bjarne@heimegut.com.