Privacy Policy
What SimRanger collects when it tests your store, why we need it, who helps us run it, and how long we keep it.
Who we are
SimRanger is a Shopify app run by Shaurya Puri, a sole trader in the United Kingdom, trading as SimRanger (“we”, “us”). We are the controller of the personal data described in this policy under the UK General Data Protection Regulation and the Data Protection Act 2018.
Shaurya Puri, trading as SimRangerLondon, United Kingdom
hey@simranger.com
The short version
- SimRanger reads your products and visits your public storefront. It never sees your customers or orders.
- Our AI shoppers stop before checkout, so no payment details ever enter the system.
- Your store password, if you give us one, is encrypted and never shown to the AI.
- Screenshots are deleted after 90 days. Everything else goes about two days after you uninstall.
- We don’t sell data, and we don’t use it to advertise.
What we collect
Only what we need to test your store and show you the results:
- Store details
- Your shop’s myshopify address and the domains connected to it, from Shopify.
- Product information
- Product and collection names, links and availability, read with Shopify’s read products permission.
- What you tell us
- The description of who shops with you, and your spending limit. Please don’t put real customers’ names or contact details in the description.
- Store access, if you add it
- Your storefront password and Shopify crawler access key. Both are encrypted before they are saved and are never shown again after you enter them.
- What the shoppers saw
- Screenshots of your storefront, a record of each step a shopper took, what they said, and the results of our checks. Your storefront is public, but it may show personal information you have put on it, such as names in reviews.
- Your Shopify sign-in
- The session Shopify gives us when you open the app. It can include the name and email address of the staff member signed in.
- Usage and billing
- How many shopper visits you have used and your plan, which Shopify bills on our behalf.
- Emails to us
- Your name, email address and what you write, if you contact support.
- Technical logs
- Server logs and error reports. They identify your shop by a scrambled code, not its address, and passwords, keys and tokens are removed before anything is recorded.
What we never collect
- Your customers’ records: no names, emails, addresses or order history. We do not ask Shopify for them.
- Orders or payment details. Our shoppers never check out or enter a card.
- Anything from your Shopify admin beyond products. We ask for one permission: read products.
Why we use it
UK data protection law asks us to name a lawful basis for each use:
- To provide SimRanger (performing our contract with you): running scans, checking what the shoppers report, showing your results, comparing scans and billing your usage through Shopify.
- To keep SimRanger safe and working (our legitimate interests): preventing abuse, fixing errors and keeping scans within the limits you set.
- To answer you (legitimate interests): replying to support emails.
- To meet legal duties (legal obligation): keeping the financial records the law requires.
We make no decisions about people by automated means. The AI shoppers make judgements about your store, not about you.
Who we share it with
We never sell your data. These companies help us run SimRanger and only use it to provide their service to us:
- Shopify
- Installs the app, signs you in and bills your usage.
- Anthropic
- Provides the AI models that play the shoppers and write your summary. It receives what the shoppers see on your storefront, including screenshots, and your shopper description. It never receives your passwords or keys. Anthropic’s commercial terms do not let it train its models on this data.
- Fly.io
- Runs our servers and the browsers the shoppers use, in London.
- Neon
- Hosts our database.
- Cloudflare
- Stores screenshots and evidence files (Cloudflare R2), and hosts this website.
- Sentry
- Receives error reports so we can fix problems. Secrets are removed before they are sent.
We may also disclose data if the law requires it, or to protect our rights or someone’s safety.
Data outside the UK
Some of these companies process data outside the UK, including in the United States and the European Union. When they do, the transfer is covered by UK adequacy regulations (including the UK–US data bridge) or by the UK International Data Transfer Addendum to the standard contractual clauses.
How long we keep it
- Screenshots and evidence files
- Deleted automatically 90 days after they are made.
- Store password and crawler key
- Deleted the moment you uninstall SimRanger.
- Scan results and history
- Kept while SimRanger is installed, so you can compare scans. Shopify asks us to erase your shop’s data 48 hours after you uninstall, and we then delete it all, with nothing kept to identify your shop.
- Support emails
- Kept for up to two years after the conversation ends.
- Logs and error reports
- Kept for our providers’ standard periods, usually 30 to 90 days.
- Financial records
- Kept for as long as UK tax law requires, without your scan content.
How we protect it
- Passwords and keys are encrypted with AES-256-GCM and only unlocked for the scan that needs them.
- All data travels over encrypted connections.
- Each shop’s data is kept separate; one shop can never see another’s results.
- The shoppers’ browsers are blocked from checkout, payment pages and private networks.
If a breach puts your data at risk, we will tell you and, where required, the Information Commissioner’s Office.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data;
- correct anything that is wrong;
- delete it (uninstalling SimRanger does this for your shop’s data);
- restrict or object to how we use it;
- send it to you or another service in a usable format.
Email hey@simranger.com and we will reply within one month. If you are unhappy with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.
If you are a customer of a shop that uses SimRanger: we do not hold your details, but please contact the shop first. Shopify passes us any request that concerns SimRanger.
SimRanger is for businesses and is not meant for anyone under 18.
This website
simranger.com sets no cookies and runs no analytics or advertising. Cloudflare, which hosts it, keeps standard server logs (such as IP addresses) for a short time to deliver the site and protect it from attacks.
Changes and contact
When we change this policy we will update the date at the top. If a change materially affects how we use your data, we will give you notice before it applies.
Questions about your data: hey@simranger.com.