Privacy Policy

Storeflit is operated by Erys AI Ltd, a company registered in England and Wales under company number 15781123. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This policy explains how we handle personal data under UK data protection law, including the UK GDPR and the Data Protection Act 2018. It covers visitors to storeflit.com and customers who use the migration and translation services.

We handle personal data in two distinct roles:

• Controller. For your account, billing, support and, with your consent, analytics data, Erys AI Ltd decides how and why the data is used. This policy is our controller notice for that data.
• Processor. For your store data, including personal data about your own customers contained in products, customers and orders, we act as a processor on your instructions. We process it only to perform the migration or translation you configure. You are the controller of that data and responsible for having a lawful basis to migrate it.

If your personal data was migrated by a merchant using Storeflit, please contact that merchant first; they control the data and we act on their instructions.

• Account data: your name, email address and sign-in details when you create an account.
• Billing data: payment and transaction details. Payments are processed by Stripe; we do not store your card number.
• Store connection credentials: the API keys you provide for your WooCommerce and Shopify stores, encrypted at rest.
• Merchant store data: the products, customers, orders, coupons and pages we import into staging to perform your migration or translation.
• Support data: the messages and details you send through the in-app support system.
• Usage data: Google Analytics data about how the site is used, collected only if you accept analytics cookies. See the Cookie Policy.

• Providing the service (running your account, migrations, translations and support): performance of our contract with you.
• Processing merchant store data: performed as your processor, on your documented instructions.
• Billing and records: performance of the contract and our legal obligations, such as tax and accounting rules.
• Security and service improvement (fraud prevention, debugging, keeping the platform reliable): our legitimate interests, balanced against your rights.
• Analytics: your consent, which you can withdraw at any time via the Cookie preferences link in the footer.

We use a small number of service providers to run Storeflit. Each processes data only to provide their service to us, under contractual safeguards:

• Account and billing data: kept while your account exists, then removed except where we must keep records to meet legal obligations.
• Staged migration data: kept so you can review and push it. You can delete staged data and saved stores in the app at any time, and it is removed when your account is deleted.
• Backups: deleted data may persist in encrypted backups for a limited period before being purged in the normal backup cycle.

Store API credentials are encrypted at rest, and all traffic to and from Storeflit uses TLS. Staging environments are private to your account, access to production systems is restricted, and we connect to your stores only through their official APIs. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

Some of our providers process data outside the UK, including in the EU and the USA. Where data leaves the UK we rely on UK adequacy regulations where they apply, and otherwise on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased in certain circumstances;
• restrict or object to certain processing;
• receive a portable copy of data you provided to us;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us through the in-app support system or at privacy@erys.ai. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve any concern first.

Privacy questions go to the in-app support system or privacy@erys.ai. We may update this policy from time to time; the date at the top shows the current version, and material changes will be highlighted on the site.

Erys AI Ltd, registered in England and Wales, company number 15781123. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.