Privacy Policy

Effective date: 21 October 2026 · Last updated: 29 October 2026

This policy explains what AI Vision Audit (“we”) collects when you use our website and app, why, who it goes to, how long we keep it and what you can do about it. Replex Engine, at the address below, is the business responsible for the personal data described here (the data controller).

Privacy questions: support@aivisionaudit.com.

What we collect

Your account

• Your email address and, if you give it, your name (in Settings, or the name you give at checkout if your account has none).
• Your password if you set one, stored only as a one-way hash (we can't read it). You don't need one: you can sign in with a link or a 6-digit code we email you.
• Your time zone, as your browser reports it (for example America/New_York), so dates in our emails match your calendar.
• When you confirmed your email, when you last logged in, and failed login attempts (to slow down repeated wrong passwords).
• Your choices: whether you asked for tips emails (and when), and whether you want audit emails.
• Where your first visit came from, if you sign up: the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the site that sent you (its address without any query) and the page you landed on. We use it to see which ads and links bring people who find the audit useful.

The stores you audit

• The store address you enter.
• What we read from that store's public pages: the HTML of the pages we check, response headers, redirects, robots.txt, sitemap information, a screenshot, and the results of our checks. We only fetch public web pages; we never log in to a store.
• If you answer the two optional questions while an audit runs: what matters most to you right now and roughly how many orders a month the store gets. We use them to put the right problems first and to understand who the service helps.

If you've used AI Vision Audit before

• We may run a fresh, quick check of your store (a few of its public pages, and a speed test on phones) and keep the result in an account for you. If you don't have one, we set one up with your name, email address and store address, with no password and no tips emails; it stays unconfirmed until you open it. If you already have one, we use it.
• When you open the page with your store check (or your full report from it), we note that you opened it, for how long, which sections you opened, whether you pressed Share, and later whether you signed in, ran another audit or chose a plan. To tell one viewer from another we keep only a one-way hash of your IP address and browser, never the address or the browser itself. When you first open the page, and when you sign in, we note the town and country your connection comes from and the kind of device (phone, tablet or computer); if you move the check to another email address, we note that address too. We use this to see whether these checks help, and keep it with the account.
• The email with your store check comes from reports.aivisionaudit.com, and replies go to our support address. Its Unsubscribe link puts your address on our do-not-email list at once. Its Delete my account link asks you to type your email address, then deletes the account, your store and its reports; we keep your address on the do-not-email list so a later check never emails you, and our records of the check keep no name, email address or store.

Teams

• If you belong to someone else's workspace, its owner and admins see your name, email address, role, which of its stores you can see, and the workspace's activity (who was invited, joined, changed role or store access, was paused, left or was removed, and when). Everyone in the workspace sees the list of its people and that activity.
• If you accept an invite while the workspace has no free seat, you wait for one: its owner and admins see that you accepted and when you asked for a seat. When you ask, we email the owner your name and email address (at most one such email a day; owners can turn these emails off). While you wait you see the latest score and problem counts of the stores you were invited to, never the problems themselves.
• What you make in a workspace (its stores, audits, reports and schemas) belongs to the workspace. It stays there when you leave, are removed or delete your account.

Reports you share

• Reports are private to your account. If you turn on a share link for a report, anyone with that link can see a summary: the store address, the audit date, the scores, the three sales areas and the top 3 problems. Someone signed in to a free account with a confirmed email also sees the other problems a free account shows, with how to fix them. Never your account details, email or the evidence we collected. Turning the link off stops it working straight away. We count how often a shared link is opened, without recording anything about the person who opened it.
• When a signed-in account first opens the full view of a shared report, we record that it did (its account and the report, once), and tell the report's owner that someone unlocked it, without saying who.
• On a plan with agency branding, you can add your agency's name, website, contact email and logo. We keep them until you change them or delete your account, and show them only on the reports you share and their link previews. The logo is stored as an image we make from your upload.
• On those plans you can also email a shared report to a client. We use the client's name and email address only to send that email, to make sure they get it once per report, and to respect their choice not to receive shared reports. We never add them to our own marketing.

When you ask us for help

• What you need, your store, and anything you choose to add: a phone or WhatsApp number and a message.
• If an agency on a plan with agency branding shared the report with you, a request you make from it goes to that agency: your name, email, store, what you need, your message and the report link. We keep a record of it, but we don't treat you as our lead.

Payments

• Payments are processed by Stripe. Stripe receives your name, email, billing address, payment details and any tax ID, and processes them under its own privacy policy.
• We never see or store full card details.
• We keep your Stripe customer and subscription IDs, your plan, and payment records (amounts, dates, tax and Stripe's reference IDs) for as long as accounting and tax law require.
• If you start a checkout, we keep a record of it: the plan, the price, where on our site you started it, and when you paid or stopped. We use it to see where checkouts stop. Deleting your account removes your name and email address from it.
• When you cancel a plan, we email you to confirm the date it ends. If you choose to tell us why you're cancelling, our team sees your answer; it's kept in our system logs, which are deleted after 60 days.

Technical data

• Your IP address is used to limit how often actions can be repeated (for example logins and sign-ups). It sits in our rate-limit store for between 1 minute and 24 hours, then expires.
• For some marketing-consent records we keep a one-way hash of the IP address the consent came from, as proof of that consent.
• A record of each email we send you (address, subject and type), so we can check delivery.
• For each sign-in session, your browser's user agent (which browser and system you used), so Profile can show where you're signed in and let you sign other sessions out. It's deleted with the session (see below).

Why we use your data

• To provide the service you asked for: your account, your audits, and emails about your audits.
• Our legitimate interests: keeping the service secure, rate limits, preventing abuse, and improving the service.
• Your consent: analytics where we ask for it, and tips emails. You can withdraw consent at any time (see Cookies and Your choices below).
• Legal obligations: keeping payment and tax records, and answering lawful requests from authorities.

Cookies

• Sign-in cookie (authjs.session-token): keeps you logged in, for up to 30 days. Needed for the app to work.
• Consent cookie (consent): remembers whether you accepted or rejected analytics, for 180 days.
• Password suggestion (aiva_pw_prompt): remembers that you closed the suggestion to set a password, for a year.
• Sign-in attempt (aiva_signin_attempt): a random number, set when you ask for a sign-in email, so this browser's page can tell when you've confirmed from the email. It holds no personal data and lasts 15 minutes.
• Signed-in hint (av_li): tells our public pages to show “Dashboard” instead of “Log in”. It holds no personal data and lasts as long as your sign-in cookie.
• Chosen plan (aiva_plan_choice): if you choose a plan before confirming your email, remembers that plan so checkout can continue after you confirm. Needed for that to work; deleted when checkout starts, or after 24 hours.
• Active workspace (aiva_ws): if you belong to more than one workspace, remembers which one you're using. It holds the workspace's ID and a signature, no personal data, and lasts 90 days.
• Plan you looked at (aiva_plan_interest): if you chose a plan on the pricing page before signing up, remembers it so your dashboard can remind you of it. Deleted when you close the reminder, or after 14 days.
• Google Analytics (_ga cookies): counts visits to our public website. Visitors in the EEA, the UK and Switzerland (or where we can't tell the country) see a cookie banner, and analytics cookies are only set if they accept. For visitors elsewhere, analytics is on by default. You can change your choice any time with “Cookie settings” in the footer; rejecting deletes the analytics cookies.
• First visit (av_first_touch, in your browser's local storage): where your first visit came from (see Your account above), kept for 30 days so we can record it if you sign up later. It follows the same rule as analytics: stored only if you accept analytics, or where we don't need to ask. Rejecting deletes it. Without it, we only record where you came from if you sign up on the page you arrived on.
• Microsoft Clarity (analytics, on our public pages only): Shows how visitors move through our public pages (heatmaps and session replays). In the EEA, the UK and Switzerland (or where we can't tell the country) it runs only if you accept analytics cookies in the banner. Its privacy policy: privacy.microsoft.com/privacystatement.

Who your data goes to

We use these services to run AI Vision Audit. Each one only gets what it needs:

• Vercel: hosts the website and app, and stores audit screenshots.
• Our database provider (PostgreSQL): stores your account and audit data.
• Upstash: runs background audit jobs (it receives only a report ID) and our rate limits (it receives IP addresses, see above).
• Our email provider (Resend or an SMTP mail server): sends your emails.
• Cloudflare Turnstile (only when we switch the bot check on): after repeated wrong passwords from one network, it checks that the sign-in attempt comes from a person. It receives your IP address and browser details.
• Stripe: processes payments. It receives your name, email, billing address, payment details and any tax ID, and handles payments, invoices and refunds.
• Sentry: receives error reports when something breaks on our side: the page and the error, with email addresses, cookies and web-address details removed first. Kept for up to 90 days.
• Google PageSpeed Insights and Chrome UX Report: measure your store's speed. They receive the store page addresses we test.
• OpenRouter, and through it the free AI models we use: the AI-written parts of your report (part of the summary, and fix steps for your store). They receive the audit's results, which are public information about your store, never your personal details (see below).
• A remote browser service, when we use one: loads store pages that only show their content after JavaScript runs.
• Google Analytics: see Cookies above.

We may also share data with our professional advisers (such as lawyers and accountants), who keep it confidential, and with authorities where the law requires it.

If you ask for help, our team receives your request, including your email, phone number and message. We don't sell your data.

AI-written report text. To write part of your report's summary and the fix steps for a problem on your store, we send OpenRouter's free AI models the audit's own results: scores, the problems found, examples from your store's public pages, its theme and apps. That is public information about your store. Never your email, your name or your IP address. The providers of free models may keep what they receive. The text is kept like the rest of your store's report data.

Where your data is processed

Our providers process data in the United States and other countries. For data from the EEA and the UK we rely on standard contractual clauses or equivalent safeguards.

Emails we send

• Account emails: a link and a 6-digit code to confirm your email address or sign in, resetting your password, and a note when a password is set on your account. If you don't confirm your email, we send one reminder with a new link and code, between 1 and 24 hours later, and never another.
• Team emails: when someone invites you to their workspace, the invite (their name, the workspace's name, your role and which stores you'll see); when you're removed from a workspace, a short note saying so. To invite you, the person gives us your email address, and we keep the invite with their workspace. An invite sent while their plan has no free seat shows their email address too, so your reply goes to them.
• Checkout reminders: if you start paying for a plan and don't finish, up to two short reminders, about an hour and two days later, from our tips sender. We send them only while you get tips emails, and their unsubscribe link stops tips emails.
• If you unlocked a report that an agency on a plan with agency branding shared with you, you're that agency's client: we send you account emails and emails about your own audits, never our follow-ups or marketing.
• Audit emails: your report is ready, an audit couldn't finish, scheduled re-check results, and two short follow-ups after your first report (about two and seven days later) about the top problem we found.

Every audit email has a link to turn audit emails off, and you can change this in your profile. We don't put tracking pixels in our emails. We send tips emails (short, practical fixes that win more sales from your Shopify store) to people who leave the tips box ticked when they create their account. The box is ticked when your account is created: untick it before you sign up and you won't get them, and the one-click link in any tips email stops them at any time. Account and service emails (sign-in, billing and your own audits) are separate and don't depend on this box.

If an email to you bounces or you mark one of our emails as spam, your address goes on our do-not-email list, and from then on we send it only what you need to get into your account: sign-in, email confirmation and password emails. If you unsubscribe from tips emails, the list stops tips and store-check emails only; emails about your own account and audits keep coming (audit emails can be turned off in your profile). We keep the list (the address, why it's there and when) for as long as we send email, so the request keeps working.

We send each person at most one email a day, and three in any seven days, that isn't about their account: checkout reminders, store checks and tips together. A temporary bounce counts too: after three in 30 days the address goes on the do-not-email list. Tips emails pause if you haven't signed in, opened a report or opened a link in a tips email for 90 days; to know this we note when you last opened a report and a tips email's link.

How we protect your data

We use HTTPS for every connection, store passwords only as one-way hashes, encrypt the service keys we store, limit access to production data to the people who need it, and use providers with their own security programmes. No system is completely secure. If a breach affects your personal data, we'll tell you, and the authorities where the law requires it.

How long we keep it

Rate-limit records expire on their own (1 minute to 24 hours). Sign-in links you ask for expire after 30 minutes and their 6-digit codes after 15 minutes or 5 wrong tries; the sign-in links in our audit emails expire after 24 hours; each works once. Email confirmation links expire after 24 hours and password reset links after 1 hour. Once a day we delete:

• system logs, including the record of each email we sent, after 60 days;
• records of calls to outside services (such as the speed test) after 180 days;
• notifications you've read, 90 days after they were created;
• help requests, 12 months after they were sent;
• sign-in sessions, sign-in links, email confirmation links and password reset links, 30 days after they expire, are revoked or are used.

Everything else (your account, your audits and their screenshots and the record of admin and billing changes) is kept until you ask us to delete it.

Payment records (invoices, amounts, dates, tax and Stripe's reference IDs) are kept for as long as accounting and tax law require, including after you delete your account. Everything else is kept as described above.

Your choices and rights

• In your profile you can change your name and password, and turn audit emails on or off. To stop tips emails, use the one-click link in any tips email or write to us.
• You can remove a store from its Settings or your Reports list; its reports, its automatic checks and the problems we track for it go with it.
• To delete your account, change your email address, or get a copy of your data, email support@aivisionaudit.com. Deleting your account removes your account and its data, except the payment records the law requires us to keep; those are deleted when that period ends. Help requests you sent go with it; stored screenshots are removed on request. Stripe keeps its own payment records as the law requires.

Depending on where you live (for example in the EEA or the UK), you have the right to access your data, correct it, delete it, restrict or object to how we use it, get a copy in a portable format, withdraw consent at any time, and complain to your data-protection authority. Email support@aivisionaudit.com and we'll reply within one month.

Children

AI Vision Audit isn't for children under 16.

Changes

If we change this policy we'll update the date at the top, and tell you by email if the change is significant. See also our Terms of Service.