Privacy Policy

1. Who we are

CoreYMM AI is a Shopify embedded app that helps merchants manage Year / Make / Model (YMM) vehicle fitment data, AI-assisted product mapping, and related storefront features. The App is operated by CoreWital.

Contact: privacy@corewital.com

2. Information we collect

Depending on how you use the App, we may process:

• Shopify shop data — shop domain, shop ID, access tokens, and install metadata required to authenticate and operate the App.
• Catalog & fitment data — product identifiers, titles, descriptions, and YMM / fitment records you create or sync through the App.
• Usage & diagnostics — App usage events, AI scan job metadata, webhook delivery status, error logs, and support ticket content you submit.
• Billing data — Shopify subscription / plan status needed to enforce plan limits (we do not store full payment card numbers; billing is handled by Shopify).
• Admin accounts — email and credentials for CoreWital operators who access the internal admin console.

The App may process storefront vehicle-selection requests via the Shopify app proxy. Those requests typically include vehicle attributes (year, make, model, etc.) needed to return fitment results. We do not intentionally collect shoppers’ names, emails, or payment details through the App.

3. How we use information

• Provide, operate, and improve YMM fitment and AI features
• Authenticate merchants and maintain Shopify sessions
• Sync products, metafields, and storefront fitment responses
• Enforce billing plans and usage limits
• Provide support, security monitoring, and abuse prevention
• Comply with legal obligations and Shopify platform requirements

4. AI processing

When you use AI scan or related features, product text and related fitment context may be sent to third-party AI providers configured for the App in order to generate suggested mappings. We use this content only to deliver the requested feature and related quality / routing controls. Do not submit sensitive personal data into product fields intended for AI processing.

5. Sharing of information

We may share information with:

• Shopify — as required to install, authenticate, bill, and operate the App on the Shopify platform
• Infrastructure providers — hosting, database, and email delivery vendors that process data on our behalf under contractual safeguards
• AI providers — solely to perform features you initiate
• Legal / safety — when required by law or to protect rights, security, and integrity

We do not sell personal information.

6. Data retention

We retain App data for as long as your shop remains installed and as needed to provide the service, resolve disputes, enforce agreements, and meet legal requirements. After uninstall, we delete or anonymize shop-linked data within a commercially reasonable period, subject to backups and legal holds, and in line with Shopify’s mandatory compliance webhooks (customer data request, customer redact, shop redact).

7. Shopify privacy compliance webhooks

The App implements Shopify’s mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction. When Shopify sends these webhooks, we process them according to Shopify’s requirements and applicable law.

8. Security

We use industry-standard safeguards appropriate to the nature of the data, including encrypted transport (HTTPS / TLS), access controls, and least-privilege operational practices. No method of transmission or storage is completely secure; please contact us if you believe there has been unauthorized access related to the App.

9. International transfers

Data may be processed in the United States or other countries where we or our service providers operate. Where required, we use appropriate transfer mechanisms and contractual protections.

10. Your rights & choices

Merchants can access or update App-managed fitment data through the App UI, uninstall the App from Shopify admin, or contact us to request deletion of App-stored shop data (subject to Shopify platform rules and legal obligations). Shoppers should contact the merchant and/or Shopify for storefront privacy requests; we assist merchants and respond to Shopify compliance webhooks as required.

11. Children’s privacy

The App is directed to businesses and is not intended for children under 16. We do not knowingly collect personal information from children.

12. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect material changes. Continued use of the App after changes constitutes acceptance of the updated policy where permitted by law.

13. Contact

Questions about this Privacy Policy or CoreYMM AI data practices:

CoreWital
Email: privacy@corewital.com
App: https://coreymmai.corewital.com