Privacy Policy

Introduction

Welcome to High Vibe Ltd (t/a AI Schema Optimizer)'s privacy policy.

We respect your privacy and are committed to protecting your Personal Data. This privacy policy will inform you how we look after your Personal Data when you visit our website or our app (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

Definitions

"Applicable Data Protection Law" shall mean the laws and regulations of the United States, the European Union, the European Economic Area and/or their member states, and Switzerland and/or the United Kingdom as applicable to the Processing of the categories of Personal Data, including but not limited to, the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), the Swiss Federal Data Protection Act ("FDPA"), and the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100-.199 ("CCPA").

"Personal Data" means any data relating to an identified or identifiable person that is uploaded by you.

"Process" or "Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, reprocessing, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

"Services" means the AI Schema Optimizer service provided to you by us in accordance with the terms of the Service Agreement.

About us

We are the creators of AI Schema Optimizer. Our full company name is High Vibe Ltd and our registered office is located in the UK. High Vibe Ltd is the controller of the data and responsible for this policy.

About our Shopify integration

Using AI Schema Optimizer's Services requires integration with the Shopify platform. When you install our app, you grant us access to specific types of data from your Shopify store via Shopify's Application Programming Interface (API). We access this data in accordance with Shopify's terms and conditions to provide our Services to you. Our privacy policy does not apply to the Shopify platform itself. Please be sure to check the privacy policy of Shopify.

The data we collect and receive from you

We may collect, use, store and transfer the following different kinds of Personal Data about you:

• Identity Data which includes first name, last name, username or similar identifier.
• Contact Data which includes billing address, email address and telephone numbers.
• Financial Data which includes billing details related to your app subscription via Shopify.
• Transaction Data which includes details about payments from you and other details of Services you have purchased from us.
• Technical Data which includes internet protocol (IP) address, your login data, browser type and version, details of the webpage visited before you access or use our website, time zone setting and location, browser plug-in types and versions, operating system and platform, and other information about the devices you use to access this website such as type of device, device settings and unique device identifiers.
• Profile Data which includes your username and password, your preferences, feedback and survey responses.
• Usage Data which includes information about how you use our website, products and Services. For example, when a user interacts with the Services, metadata is generated that provides information about the way our app is used, e.g. we log which features are used and how often products are processed.
• Data collected via Shopify. As described above, our Services integrate with Shopify. When you install our app, AI Schema Optimizer is authorized to connect and access information in accordance with our agreement with Shopify and the permissions you grant during installation. For example, we receive your shop domain, contact email, and access to your product catalog information to facilitate the core function of the app. We do not receive or store your password for your Shopify account.
• Marketing and Communications Data such as your preferences in receiving marketing from us and your communication preferences.
• Product Data processed by the App. We process the data from your product catalog, such as titles, descriptions, and images, in order to provide the Services. By using the Services, you acknowledge and agree that this data may be transferred from your current location to our servers in the UK and US (see below for more detail) and to the authorised third parties referred to below.

We also collect, use and share aggregated data such as statistical or demographic data. Aggregated data could be derived from your Personal Data but is not considered Personal Data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this privacy policy.

We do not collect any special categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Legal bases for collecting your Personal Data

We will only use your Personal Data when the Applicable Data Protection Law allows us to. Most commonly, we will use your Personal Data in the following circumstances:

• Where you have clearly consented. This will be the case where you have voluntarily chosen to submit your Personal Data by installing the app. You can withdraw your consent at any time by contacting us at [email protected] (but this will not affect the legitimacy of our Processing prior to its withdrawal).
• Where we need to in order to perform the contract we are about to enter into or have entered into with you.
• Where we need to comply with a legal obligation.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, to enable us to conduct and manage our business in order to give you the best service/product and the best and most secure experience.

How do we collect and receive your Personal Data?

We obtain your Personal Data when you provide it to us, such as when you contact us by email or telephone or by any other means). For example, you directly provide your Personal Data to us through your submissions or requests made via our website, including via forms you complete in order to contact us, to create an account on our website, respond to a survey or to subscribe to our Services.

When you install the app, the Shopify platform provides us with access to your Personal Data to facilitate the integration as described above.

We also receive information indirectly when you navigate our website, as personal information about you and usage details are automatically observed and collected along with technical data about your equipment, browsing actions and patterns. This includes information such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connecting to our website and other technical communications information. We collect this Personal Data by using cookies, server logs and other similar technologies.

How do we use your Personal Data?

We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances:

• To enable us to communicate with you by responding to your requests and questions and by sending service-related, administrative and technical emails and other communications including information about updates to our products and Services, promotional offers and changes in our policies or terms.
• To provide the Services to you under the contract we have entered into with you.
• To undertake internal research for technical development as well as for constant verification and improvement of the quality and security of AI Schema Optimizer and the Services.
• To investigate security issues and help prevent abuse, including the detection and eradication of malicious deceptive, fraudulent or illegal use.
• To respond to law enforcement requests as required by the law, court orders or other governmental requests or regulatory requirements.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Who do we share your Personal Data with?

In order to provide our website and Services we may share your information with the following service providers:

• Analytics and UX Providers
• Authentication Providers
• Cloud Hosting Providers
• CRM Software
• Email Marketing Platforms
• Website Optimization Platforms
• Customer Support Platforms
• Communication Platforms
• Form Builders

We may share your information with any buyer of our business if we choose to sell it or any third parties with whom we merge parts of our business or our assets. We may also share your information if we believe it to be necessary to comply with any court order, law, legal obligation, or legal process, including to respond to any government or regulatory request, to prevent fraud or to protect our rights of safety or those of our customers or other third parties.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to Process your Personal Data for specified purposes and in accordance with our instructions.

Where is your data stored and for how long do we keep it?

We store your data in the UK and in the United States of America.

We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period in the event of a complaint or if there is a prospect of litigation in respect to our relationship with you.

We consider the nature and sensitivity and purpose for which we collected your date when deciding when it's time to delete it.

Transfers outside the UK

Whenever we transfer your Personal Data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data.
• In respect of transfer to certain service providers in other countries, we will use a lawful transfer mechanism such as the Standard Contractual Clauses approved for use in the UK which give Personal Data the same protection it has in the UK. For further details please contact us at [email protected].

Please get in touch with us at [email protected] if you want further information on the specific mechanism used by us when transferring your Personal Data out of the UK.

How do we protect your data?

AI Schema Optimizer takes data security very seriously and we have put in place appropriate security measures to protect your Personal Data from being accidentally lost or used, accessed, altered or disclosed in an unauthorised way. We also make sure that only our employees, agents, contractors and other third parties with a business need to know your Personal Data have access to it. They will only Process your Personal Data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

What are my rights?

You have the right to:

• Access your Personal Data (commonly known as a "data subject access request"). You can receive a copy of the Personal Data we hold about you and to check that we are lawfully Processing it.
• Ask for correction of your Personal Data. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Ask us to erase your Personal Data. You have the right to request the erasure of your Personal Data at any time, if you don't think that we have the right to hold it. However, we may retain certain information about you as required by law and for legitimate business purposes permitted by law.
• Ask us to restrict our Processing of your Personal Data. ask us to suspend the Processing of your Personal Data in several scenarios, including if you want us to verify the accuracy of the data, and where our use of the data is unlawful but you do not want us to erase it.
• Object to our Processing of your Personal Data for a particular purpose or to request that we stop using your Personal Data.
• Ask us to transfer your Personal Data to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw your consent to us Processing your Personal Data where we are relying on consent to Process your Personal Data. However, this won't affect the lawfulness of any Processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or Services to you. We will advise you if this is the case at the time you withdraw your consent.
• Ask us to stop or to start sending marking messages at any time.

If you want to exercise these rights you should contact us by email at [email protected].

Our contact details

If you have any questions about this privacy policy or our privacy practices, please contact us at [email protected].

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

Changes to the privacy policy and your duty to inform us of changes

We may change this privacy policy from time to time, for example to comply with updated laws and regulations or because of a change in our terms and conditions. We will post the changes to this page so that you can stay informed. If we make any changes that materially affect your privacy rights we will also contact you, for example by email.

It is important that the Personal Data we hold about you is accurate and current so please keep us informed of any changes to your Personal Data.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.