Privacy Policy — Trinis AI

1. Who we are

Trinis AI operates the ProductSync platform, which helps merchants sync, AI-enrich and publish product catalogs to their Shopify stores. This policy explains how personal data is handled in accordance with Brazil's General Data Protection Law (LGPD) and Shopify's protected data policies.

2. Data we collect

Your account data: email, name, password (stored hashed, never in plain text) and preferred language, provided at sign-up.

Billing data: when you issue an invoice or subscribe to a paid plan, we collect legal name, tax ID, address and the contact details needed for billing, processed through our payments partner (Stripe).

Your Shopify store data: when you connect a store, we access — with your explicit authorization via OAuth — data on products, variants, prices, inventory and, where applicable and approved by Shopify, aggregated order data (totals, items sold, quantities) to calculate performance metrics in your dashboard.

Important: to generate revenue and best-seller metrics, we access only order totals, financial status and line items (product, variant, quantity, price). We do not access or store the name, email, phone or address of your store's end customers. That order data is processed in memory on each load of your dashboard and discarded right after — it is not saved to our database.

3. How we use the data

Authenticate you and keep your dashboard session secure.
Sync, enrich and publish products to your Shopify store, as configured by you.
Calculate performance metrics (revenue, estimated profit, best sellers) shown only to you, the store owner.
Process payments and issue invoices.
Send operational communications (email confirmation, password reset, notices about your account).

We do not use your data for advertising, we do not sell it and we do not share it for end-customer profiling.

4. Sharing with third parties

We share data only with service providers strictly necessary to operate the platform:

Shopify — as your store's platform, which we communicate with via API to read and update your catalog.
AI model providers (e.g. OpenAI) — to generate product descriptions and images from your catalog content. No end-customer data is sent to these providers.
Stripe — to process payments and subscriptions.

We do not share data with third parties for marketing purposes.

5. Security

Access credentials for your Shopify store are stored encrypted (AES/Fernet) and never in plain text.
All communication with Shopify's APIs and between your browser and our servers is over HTTPS/TLS.
User passwords are stored only as a hash, never in plain text.
Access tokens have a limited lifetime and are renewed automatically and securely.

6. Data retention and deletion

We keep your account and store data for as long as your account is active. When you disconnect a store, we revoke access and stop processing new data from it. Order data used for metrics is not retained — it is recalculated each time you view the dashboard. You can request deletion of your account and associated data at any time through the contact below.

7. Your rights (LGPD)

You can request at any time: confirmation that your data is being processed, access, correction, portability, anonymization or deletion of personal data, and withdrawal of the consent given when connecting your Shopify store (by disconnecting it at any time from the dashboard).

8. Cookies

We use strictly necessary cookies to keep your dashboard session authenticated. We do not use third-party tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or a notice in the dashboard.

10. Contact

Questions about this policy or your data? Get in touch at trinis@trinis.ai.