Ithilon Privacy Policy
Last updated: 7 November 2026
Ithilon ("Ithilon", "we", "us") is a Shopify app that reads a store's sales, stock, product and storefront-search data and prepares weekly buying decisions for the merchant's buyer. This policy explains what we process, why, how long we keep it and who we share it with. It applies to merchants who install Ithilon ("you") and to the customers and visitors of their stores.
Operator: Bahadır Sağlam, İzmit, Türkiye. Contact: privacy@ithilon.com.
1. Our role
For data about your store's customers and visitors, you are the controller and we are your processor: we process it only to provide Ithilon to you, under your instructions (see the Data Processing Addendum in our Terms). For data about you and your staff (account and billing contact), we are the controller.
2. What we process
From Shopify, through the Admin API (with your permission at install):
- Products: title, type, vendor, tags, status, variants and their options (size, colour), prices, unit cost.
- Orders: for each order line, the product variant, quantity, price, discount and refund amounts, date, channel (online or point of sale) and location; whether the order was cancelled or a test. We do not request customer names, email addresses, phone numbers or postal addresses, and we do not store customer IDs.
- Inventory: quantity per variant and location; incoming quantities; locations (name and type).
- Store settings: time zone and currency.
From our web pixel on your storefront (only if the visitor has given analytics consent):
- Search terms entered in your store search, and the products returned.
- Product, collection and page views (including the referring site and the
utm_sourcetag), add to cart, remove from cart, and the products and quantities in a completed checkout. - A browser identifier provided by Shopify. We replace it with a one-way hash that changes every day, so the same browser cannot be linked across days. We do not set our own cookies.
- The visitor's IP address is used only in memory to limit abuse of the event endpoint; it is not stored.
From you, in the app: your settings (for example lead times, season end, gross margin), decisions you mark as applied or skipped, orders you record, corrections and messages you type to discuss a decision.
Account data: the shop domain and the access token Shopify issues to the app. Billing is handled by Shopify; we do not see payment card details.
3. Why we process it
- To calculate sales velocity, stock cover, early reads on new products, reorder quantities, stop and markdown signals, unmet demand (searches with no result, sold-out sizes) and the season report.
- To write the explanation of each decision, and to answer questions and corrections you send (see section 6).
- To measure how past decisions turned out (the scorecard).
- To operate, secure and support the service.
Decisions are about products and stock, not about individual customers. We do not profile customers, do not make automated decisions with legal or similar effects on them, and do not use the data for advertising.
4. How long we keep it
- Raw order exports are deleted after each run; we keep only daily totals per variant.
- Storefront events are kept for 400 days (one season and the same period last year), then deleted.
- Stock snapshots, settings, decisions and the scorecard are kept while the app is installed.
- When you uninstall Ithilon, Shopify sends a deletion request 48 hours later and we delete all data for your store. Backups maintained by our hosting provider expire on their own schedule.
5. Where it is stored and how it is protected
Data is stored on servers of Render Services, Inc. in the United States (Virginia), on encrypted disks, and is transmitted only over HTTPS. Access is limited to the operator. Each store's data is kept separately.
6. Who we share it with (sub-processors)
| Sub-processor | Purpose | Data |
|---|---|---|
| Shopify Inc. | Platform, billing | As described by Shopify |
| Render Services, Inc. (USA) | Hosting and storage | All data above |
| Anthropic, PBC (USA) | AI writing of decision texts, answers to your questions and corrections, interpretation of new search terms | Product names and attributes, aggregated numbers, search terms, your messages. No customer contact details. Under Anthropic's Commercial Terms, customer content sent through the API is not used to train its models. |
| Cloudflare, Inc. | DNS and email forwarding for ithilon.com | No store data |
We do not sell or rent data, and we do not share it with other merchants. We may use aggregated, anonymous figures (for example, the average accuracy of a rule across stores) to improve Ithilon; these cannot identify a store or a person and are never shown to other merchants.
Search terms are typed freely by visitors and could occasionally contain personal data; we use them only to group demand and they are subject to the same retention and deletion.
7. Requests from customers
Because we hold no customer names, contact details or customer IDs, we generally cannot link data to an individual customer. If you receive a data request or deletion request from a customer, Shopify forwards it to us and we respond as required. Contact us at privacy@ithilon.com for help.
8. Your rights
You can view and change your settings in the app, and request a copy or deletion of your store's data at any time by emailing privacy@ithilon.com. Uninstalling the app deletes your data as described above. Depending on where you are, you may have rights under the GDPR, UK GDPR, CCPA or the Turkish Personal Data Protection Law (KVKK), including access, correction, deletion, restriction and complaint to a supervisory authority.
9. Changes
We will post changes here and update the date above. Material changes will be notified in the app.
10. Contact
privacy@ithilon.com · İzmit, Türkiye