Section Forest Privacy Policy

Section Forest (“Section Forest” or “the App”) is a Shopify app that adds theme sections, AI-built pages, a side cart, volume discounts and bundles, and product page blocks to Shopify stores. It is operated by Progryss Media Private Limited (“we”, “us”, “our”). The App runs at sectionforest.progryss.com.

This policy explains what the App collects, why, who it is shared with, and how long it is kept. By installing or using the App, you agree to this policy.

What we collect

From merchants

• Store identity — your myshopify.com domain, store name, contact email, plan, and when you installed, last used and uninstalled the App.
• Access tokens and sessions — the tokens Shopify gives the App so it can act on your store.
• Sections — which library sections you own, save, or have added to a theme.
• Settings — your side cart, volume discount and bundle offers, product block settings, and Page Builder brand settings (colours, fonts, button corners, tone and notes).
• AI work — for each “Customize with AI” run, the section, theme, page, product or collection you chose, your notes, the result, any warnings and the credits used. For AI pages, your requests, the page as built, its template, a backup of your original home page template (if you replaced it), and the published page’s ID and address. For “Change with AI” in the page editor, what you asked for, a short summary of what changed, and a copy of the section before and after the change (so you can undo it). For AI pictures, the AI credits each one used.
• Plan, billing and credits — your plan (from Shopify’s Billing API), subscription records, one-time purchases and your AI credit balance. When a custom pack is bought for another store, we record that store’s myshopify.com domain so the sections reach it.
• Free trial — one trial per store: when it started, its length, the days used, and whether it has ended.
• Feature requests — the title, details and optional picture you send, and your votes. Other merchants see only a request’s title, tag, status and vote count — never which store sent it.
• Live chat — what you write in the support chat inside the App, so we can answer you.
• Browser preferences — inside the App, your browser’s localStorage remembers which updates you have seen, dismissed setup guides, rows per page in tables, your last Page Builder style, and the sections in your custom pack. These stay in your browser; we don’t receive them.

From your store (Shopify Admin API)

• What the App reads — only what a feature you use needs: products and collections, themes and theme files, your Files library, navigation menus, pages, and the discounts the App itself created. The App does not read orders or customers.
• Permissions — write_themes is always required, to put sections and blocks into your theme. The others are asked for only when a feature needs them, and Shopify shows you why first: read_products (product pickers, and AI writing about your products), write_products (putting a page template on a product), write_files (saving AI-made pictures to your Files), write_discounts (the discounts behind bundles, volume pricing and side cart rewards), write_online_store_pages (publishing an AI page) and write_online_store_navigation (adding that page to your main menu). The App never asks for access to orders or customers.
• What the App writes (only when you ask) — section files and templates; a copy of your live theme named “Section Forest · Try” for previews; product templates and a product’s template choice; pictures in Files; pages and a main menu link; the App’s own metafields (your storefront settings); automatic discounts; and charges you approve.

From shoppers and customers

The App holds no shopper or customer personal data. The side cart, bundles, product blocks and library sections talk only to your own store’s Shopify storefront APIs (cart and products) — for example, a header shows how many items are in the cart. Bundle and volume pricing runs in a Shopify Function inside Shopify’s checkout.

The side cart keeps two values in the shopper’s sessionStorage: whether the reward celebration was already shown, and the cart timer. Some library sections remember a shopper’s choice in their browser (localStorage or sessionStorage) — for example that a popup or announcement bar was closed, or when a countdown started. Nothing that identifies the shopper is stored, and none of it is sent to us.

Sections with forms use Shopify’s own contact and newsletter forms, so what a shopper submits goes to Shopify, not to the App. A section can show a YouTube or Vimeo video or a Google map that you add; that provider’s own privacy policy applies to the embed. The App itself sets no cookies and runs no analytics or tracking on your storefront.

How we use it

• To run the features you use.
• To apply your plan, purchases and credits.
• To give each store one free trial (reinstalling continues the same trial).
• To review and answer your feature requests and chat messages.
• To ask, through Shopify’s own review form, for an App Store review once you have used the App; your rating and comment go to Shopify, not to us.
• To run, secure and fix the App, including showing a store’s details in our internal admin panel when we help you.

We don’t sell your data, use it for advertising, or use it to build anything for anyone other than you.

AI processing (OpenAI and Anthropic)

The App uses one AI provider at a time — OpenAI or Anthropic (Claude) — to write copy and settings, to write or change the code of a section on an AI page, and to check that a change matches what you asked for; pictures are always made by OpenAI. Only what the task needs is sent: your store’s name, description, web address and currency (never your postal address or contact details); product titles, handles, types, prices, the start of descriptions and image addresses; your theme’s colours and fonts and your brand settings; the notes and requests you type, and for “Change with AI”, that section’s code and settings. A screenshot you upload for “Create discount from screenshot” is sent to read the offer and is not kept — only the draft discount made from it is saved.

Under OpenAI’s and Anthropic’s API terms, data sent through their APIs isn’t used to train their models by default. AI pictures are saved to your Shopify Files. The App marks figures and promises the AI made up as warnings, and you review everything before it goes live.

Sharing & sub-processors

We share data only with the services needed to run the App:

• Shopify — the source of your store data, and where everything the App makes is kept: sections, templates, pages, pictures in Files, discounts and the App’s settings on your storefront. Shopify also handles all billing, including free trials, and bills nothing until a trial ends.
• OpenAI — writes the AI copy, settings and section code when it is the chosen provider, and makes AI pictures, as described under AI processing.
• Anthropic — writes the AI copy, settings and section code when Claude is the chosen provider, as described under AI processing.
• Font provider — serves the App’s font to your browser. No store or shopper data is sent to it.
• Support chat — our own chat inside the App, where your messages are kept so we can answer you.
• Hosting and database provider — runs the App and stores the data it needs.

We may also disclose data where the law requires it.

Retention & deletion

• While the App is installed — we keep your data so the App works.
• When you uninstall — access tokens and sessions are deleted at once. Your store is marked uninstalled and its plan goes back to Free. A running trial stops, and the days used are kept for a reinstall.
• On your storefront — the side cart, bundles and product blocks stop showing.
• In your store — sections, theme copies, pages, menu links, pictures and discounts the App made stay until you remove them.
• Our database — all of your store’s data (sections, settings, AI work, billing records, credits, the trial record, and feature requests and votes) is permanently deleted when Shopify sends the shop/redact request (48 hours after you uninstall), and never later than 30 days after that request.
• Backups — deleted data may stay in nightly database backups for up to 14 days.

Shopify compliance webhooks (GDPR)

• customers/data_request — acknowledged. The App holds no customer data, so there is nothing to send; we confirm this within 30 days if asked.
• customers/redact — acknowledged. There are no customer records to delete.
• shop/redact — deletes your store’s data as described under Retention & deletion.

Security & data transfers

All traffic uses HTTPS. The App’s pages check your Shopify session, and webhooks are checked against Shopify’s signature. Only staff who need it can reach production, and our internal admin panel has its own sign-in. Your data may be processed outside your country; where it is, we rely on our providers’ contractual protections.

Your rights

Depending on where you are, you may have these rights over your data:

• Access and correction — you can see and change most of it inside the App, or ask us.
• Export — write to us for a copy of your store’s data.
• Deletion — uninstalling deletes it as described above; write to us to delete it sooner.

You may also object to or restrict how we use your data, and withdraw consent. We won’t treat you differently for using these rights.

Changes to this policy

We post any change to this policy on this page.

Contact