RC Advisor Privacy Policy

Operator, contact and scope

RC Advisor, operated by Shi Qi huang , an individual developer based in Zhejiang, China.

Privacy/support contact: support@rcadvisorai.com. This policy describes application information and support/privacy communications. It does not replace the merchant's own customer notices or Shopify's privacy policy.

By installing or using RC Advisor, the merchant agrees to the Terms of Service and Data Protection Terms.

Information we process

Store/application information includes shop domain/store identity, OAuth/session/application metadata and credentials, product/catalog/mapping data, selected RC products or intent, recommendation IDs and event times, Shopify product/variant IDs, and cart/recommendation attribution identifiers. Authentication can also process Shopify-provided merchant Admin-user identity, including a name/email where supplied.

Order-linked attribution includes Shopify order ID/reference, recommendation/conversion association, relevant quantities, prices/discounts used to calculate attributed merchandise revenue, and conversion times. Shopify webhook payloads may be received and parsed as required. Full raw orders/create payloads are not persisted by RC Advisor.

Support/privacy communications can include sender email addresses, message bodies, attachments and information voluntarily supplied by merchants or customers. Please provide only what is necessary for your request.

Customer name, email, phone and postal address are not required for product compatibility, recommendation or fitment logic. This does not mean such information can never occur in authentication, incoming webhooks or voluntary support messages. Operational requests/logs can involve IP addresses, request metadata or store identifiers.

Purposes and optional analytics

We process information to provide verified product compatibility/recommendation assistance, merchant catalog connection/setup, authentication/security, support and privacy-request fulfillment. Order-linked information is used for recommendation/conversion attribution, attributed merchandise revenue analytics and mandatory privacy processing.

Protected order data is not used to generate recommendations, personalize offers, create customer profiles, target advertising or conduct unrelated analytics. Production Order Debug is disabled.

The deployed remediation gates optional attribution using Shopify Customer Privacy API analytics permissions. Refused, unknown or unavailable permission does not permit optional collection; functional recommendations and cart purchases remain available. The production backend and active V4 storefront extension implement these controls. Merchants remain responsible for their customer notices and applicable consent settings.

RC Advisor does not sell protected customer data and does not intentionally use advertising or marketing tracking. This statement describes our service; it does not override a provider's independent obligations.

Retention and deletion

Under the deployed remediation and configured maintenance, detailed recommendation and order-linked attribution records are kept for at most 90 days from the recommendation's creation. Dashboard totals cover that rolling window: expired detail and its attributed revenue leave the totals. No permanent customer-linked aggregate is kept.

Protected privacy-request export artifacts are retained for at most 24 hours from creation under the deployed private-export and maintenance controls. Delivery failure does not justify indefinite retention; fulfillment must be escalated and managed securely.

RC Advisor-managed application logs and backups have a maximum 14-day retention policy, enforced by the deployed maintenance/log/backup workflows. Backups and manual/off-host copies must remain encrypted. Expiry and safe restoration depend on verified backup inventory; provider-internal copies are not claimed to follow the same deletion schedule.

Minimal pseudonymous shop/order redaction digests are retained for up to 104 days under the bounded backup policy to prevent previously deleted data from returning through eligible restores. They are not anonymous customer data and are not used for recommendations or marketing.

Authentication credentials are retained only while operationally required. Uninstall removes the affected shop's Sessions; expiry maintenance removes unnecessary expired credentials while preserving operational refreshable credentials. Catalog/mapping data remains for the merchant's service use and is removed through Shopify shop redaction.

Normal support communications are retained no longer than 90 days after the related issue is closed. Privacy/data-rights communications are retained no longer than 90 days after the request is completed. Attachments are deleted when no longer needed and no later than the applicable communication period, unless an exception applies. Sent, Trash, Gmail copies and Thunderbird local copies fall within this operator-controlled policy.

Limited communications or evidence may be kept longer when reasonably necessary for legal obligations, security investigations, dispute resolution, fraud/abuse prevention or compliance evidence. Such exceptions do not authorize general indefinite retention or silently extend the application's detailed attribution window. The reason and continued need must be reviewed.

Email providers have their own queues, logs and backup/deletion processes. We do not promise immediate physical deletion from those systems or a universal 14-day provider retention period. Local logical deletion also does not guarantee immediate erasure of filesystem free pages.

Privacy requests and Shopify workflows

Contact support@rcadvisorai.com for privacy questions or applicable access/deletion rights. Customers may also contact the relevant merchant. We verify requester authority, coordinate with the merchant and respond as required by applicable law; do not send unnecessary identity documents, passwords or access tokens.

Shopify's customers/data_request topic requests responsive customer-related data; customers/redact requests deletion of matching customer/order-linked data; shop/redact requests deletion of the shop's merchant-owned data after the Shopify lifecycle event. Our processing uses the authenticated shop and relevant order linkage, not another merchant's records.

Customer redaction removes matching order-linked recommendation/attribution records. Shop redaction removes Sessions, catalog snapshots, mappings and recommendation records while preserving shared non-customer product knowledge. Private exports are delivered through a verified, protected operator workflow, not a public link.

Support/privacy communications are handled through the operator rights workflow; they are not automatically matched or deleted by Shopify order identifiers. Requests to remove those communications and attachments are reviewed separately under the communication retention and necessary-evidence rules.

Uninstall ends service access and removes Sessions; it does not imply immediate erasure of every backup or support message. Remaining merchant data follows bounded retention and Shopify redaction. Backup restoration must not silently resurrect redacted records. These deletion/export controls are deployed; genuine Shopify privacy-event delivery remains a separate pending live validation.

Confidentiality and security

Public application traffic uses HTTPS/TLS. Operator-supplied provider evidence supports default provider-managed encryption at rest for the current production ECS storage in Johor. This is distinct from customer-managed KMS; we do not claim customer-managed keys, guest LUKS/dm-crypt or SQLCipher.

The deployed remediation restricts privacy exports to private service-controlled paths and permissions, avoids publicly accessible export URLs, restricts production Order Debug, and applies bounded retention. The pending live-evidence and external-approval boundaries stated above still apply. Complete raw orders/create payloads are not persisted by RC Advisor.

Access is limited to people and providers who need it for the service, support or valid privacy/security work and must be handled confidentially. Future snapshots, backups and manual/off-host copies must be separately protected and verified; production disk encryption alone does not protect every copy or transfer.

No perfect-security, zero-access, certification or uninterrupted-availability guarantee is made. Report suspected incidents or unauthorized disclosure to support@rcadvisorai.com.

Service providers and platform dependencies

Volcengine hosts the application in Johor / Asia Pacific Southeast. Application databases, authentication/runtime information, logs and protected privacy-request artifacts may be processed there. We identify the provider by its service name; this does not assert an unverified contracting legal entity.

ImprovMX forwards incoming support and privacy email. It may process sender addresses, headers, message bodies, attachments and forwarding/delivery metadata. Google/Gmail is the operator mailbox and may store those communications, sender identifiers, attachments and mailbox copies. Exact ImprovMX routing and Gmail residency are not represented as fixed.

Resend delivers outbound support/privacy email and may process sender/recipient addresses, subjects, bodies, attachments and delivery metadata. The sending domain is rcadvisorai.com; the selected sending region is Tokyo (ap-northeast-1). Resend's published information states that stored customer data is held in the United States; the sending region does not imply Tokyo-only storage. We do not intentionally use open/click tracking; Resend receiving is disabled.

Thunderbird is local operator email software, which can hold local messages and attachments. It is not automatically a separate external email processor. Shopify provides installation/authentication, Admin APIs, webhooks and storefront/cart/checkout context, and has its own terms and privacy responsibilities; Shopify is not described as our subprocessor in every context.

Providers process information for their assigned service functions and may have their own legal duties. This provider inventory is not a claim that their contractual roles, retention or transfer arrangements are identical in every jurisdiction.

International processing

Information may be processed outside a merchant's or customer's country. Known locations include application hosting in Johor, Malaysia, operator access from Zhejiang, China, and Resend sending infrastructure in Tokyo, Japan with stored data in the United States. ImprovMX and Google/Gmail infrastructure is not guaranteed to one disclosed country.

The merchant and operator must meet applicable requirements for the relevant markets and processing. This document does not assert that a specific transfer mechanism, certification or contractual safeguard has already been implemented for every flow.

Policy changes

This policy identifies its version and prospective effective date. Material changes, including service-provider or processing changes, will be reflected in updated policy/terms made available to merchants. No automated email-notification service or historical acceptance is asserted.

For questions about an update, retention exception or rights request, contact support@rcadvisorai.com.