Privacy Policy

Effective: 1 April 2026 · Last updated: 30 April 2026 (v1.1 release)

✅ The short version: We don't track your browsing. We only read publicly visible data on the Shopify storefronts you're already viewing. We never sell, share, or rent your data. Page content sent to AI is processed and immediately discarded.

1. Who we are

CRO Lens is operated by Sarvadhi Digital Solutions Pvt Ltd, registered in Ahmedabad, Gujarat, India. For privacy questions email [email protected].

2. What data we collect

2.1 Account data

Email address — to send your license key, receipts, and important account notices.
Payment metadata — payment ID, plan, billing cycle, renewal date. We do not store your card number, UPI ID, or banking details. All payment processing is handled by our payment provider (Razorpay).
Device fingerprint — a one-way SHA-256 hash of your browser user-agent and extension install ID. Used solely to enforce per-license seat limits. Cannot be reversed to identify you.

2.2 Storefront page data

When you run a scan on a Shopify store, our content script reads publicly visible data from that page's DOM and network: store/theme name, detected apps and scripts, product and collection page structure, pricing and offer elements, trust signals, cart and checkout patterns, and Core Web Vitals / performance timings.

This data is used to compute your conversion score and leak report. Most of it is not stored — it's used in-memory for the response. Pro scan history stores only the resulting scores and findings, not the raw page.

2.3 AI insights (Pro plan only — processed, not stored)

If you use the AI Insights feature, the extension sends a summary of the detected storefront signals to our backend, which forwards it to our AI provider for analysis. The submitted content is immediately discarded after processing.

2.4 Usage data (anonymous, aggregate)

How many scans your license key performs per day (for rate limits).
Endpoint hit counts — for product improvement.
Anonymous error logs.

We do not log which specific stores you scan.

2.5 Scan history (Pro / Agency)

To power score tracking over time, paid plans store a deduplicated snapshot per scanned store: store domain, conversion score, detected leaks, and a server-side timestamp. This is linked to your license so you can review your own history, and is deleted when you ask or 12 months after cancellation.

2.6 Other data

Magic-link login tokens and feedback submissions are handled with minimal retention.

3. What we never collect

Your browsing history outside the stores you actively scan.
Your Shopify Admin credentials, orders, customers, or inventory.
Personally identifiable data beyond your email address.
Card numbers, CVVs, UPI PINs, or banking passwords.

4. How we use your data

Deliver the service you signed up for.
Send transactional emails (license keys, receipts, expiry warnings).
Enforce plan limits (daily lookups, seat counts).
Detect and prevent abuse / fraud.
Improve the product based on aggregate, anonymised usage patterns.

We do not use your data to train AI models or for any third-party advertising.

5. Who we share data with

Payment provider (Razorpay) — to process payments.
AI provider — for AI insights (storefront signals sent without your account info).
Email delivery providers (Postmark / AWS SES) — for transactional emails.
Cloud hosting (Vercel / Supabase) — to run our servers and database.

We never sell, rent, or share your data with marketers, data brokers, or competitors.

6. Data retention

Email + license — kept while active and 12 months after cancellation.
Payment records — kept for 7 years (Indian tax requirements).
AI insight content — never stored.
Scan history — kept while active and 12 months after cancellation.
Usage logs — kept 90 days, then aggregated and anonymised.

7. Your rights

You can access, correct, delete, or export your data. Email [email protected] with "Data request" — we respond within 30 days.

8. Cookies & tracking

The extension uses chrome.storage.local only — no cookies, no third-party trackers. The website uses minimal session cookies for account login. We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

9. Contact

Questions about this policy?
Email: [email protected]
Sarvadhi Digital Solutions Pvt Ltd, Ahmedabad, Gujarat, India