Privacy Policy for ConversionPilot AI

Effective Date: September 6, 2026
Last Updated: September 6, 2026

ConversionPilot AI is a Shopify application developed and operated by ImpleVista (“ImpleVista,” “we,” “us,” or “our”).

This Privacy Policy explains how ImpleVista collects, uses, processes, stores, and protects information through ConversionPilot AI (“ConversionPilot AI,” the “App,” or the “Service”) when Shopify merchants install or use the App and when visitors or customers interact with ConversionPilot AI features on a merchant’s online store.

ConversionPilot AI is designed to help Shopify merchants understand shopper behavior, detect purchase friction, engage visitors with relevant offers, reduce abandonment, and improve conversion performance.

By installing or using ConversionPilot AI, merchants acknowledge the data practices described in this Privacy Policy.

1. Information We Collect

The information collected by ConversionPilot AI depends on how a merchant configures and uses the App.

1.1 Merchant and Shopify Store Information

When a merchant installs, connects, or uses ConversionPilot AI, we may receive and process information from Shopify that is necessary to authenticate the merchant, operate the App, and provide its features.

This information may include:

• Shopify store name and store domain;
• store identifiers;
• authentication and session information;
• Shopify API access tokens and authorization information;
• products and collections;
• merchant-created offers and promotional configurations;
• discount settings;
• App configuration and preferences;
• subscription and billing status;
• App usage information; and
• other information made available through Shopify APIs that is necessary to provide the Service.

ConversionPilot AI uses Shopify OAuth and session-token authentication and separates merchant information by Shopify store.

2. Store Visitor and Customer Information

When ConversionPilot AI is activated on a merchant’s storefront, the App may process information about how visitors interact with that store.

Depending on merchant configuration, this may include:

• page views;
• product views;
• collection views;
• cart views;
• add-to-cart events;
• checkout-start events;
• scrolling behavior;
• deep scrolling;
• hover duration;
• dwell time;
• exit-intent signals;
• cart inactivity;
• repeated interactions with prices;
• first-time or returning visitor status;
• device-related parameters;
• session information;
• interactions with offers;
• popup impressions and interactions; and
• conversion-related events.

ConversionPilot AI uses these behavioral signals to help identify potential shopping friction, including price hesitation, exit intent, cart abandonment, and trust hesitation.

3. Cookies and Similar Technologies

ConversionPilot AI may use first-party cookies, browser LocalStorage, and similar technologies to provide its functionality.

These technologies may be used to:

• identify visitor sessions;
• distinguish new and returning visitors;
• maintain session state;
• remember offer interactions;
• remember dismissed popups;
• control how frequently offers are displayed;
• prevent certain promotions from being repeatedly displayed;
• measure offer performance; and
• support analytics and conversion attribution.

Where applicable law requires consent before certain cookies, behavioral tracking, or similar technologies can be used, merchants are responsible for implementing appropriate consent mechanisms and configuring their storefronts accordingly.

4. Friction Detection

ConversionPilot AI analyzes certain storefront interaction signals to identify situations where a visitor may be experiencing hesitation or friction during the purchasing process.

These signals may include:

Price Hesitation: Repeated interaction with prices, currency switching, or extended product-page activity without further interaction.

Exit Intent: Signals indicating that a visitor may be preparing to leave the page or store.

Cart Abandonment: Inactivity or abandonment behavior after a product has been added to the cart.

Trust Hesitation: Certain interactions around checkout buttons, shipping information, payment information, terms, or related elements.

Offer Eligibility: Session history, customer type, cart thresholds, and other configured conditions may be evaluated to determine whether a visitor qualifies for an offer.

These functions are part of the App’s documented friction-detection system.

5. Offers and Promotional Information

ConversionPilot AI allows merchants to create and manage promotional offers.

The App may process information necessary to determine whether an offer should be displayed based on factors such as:

• visitor type;
• trigger events;
• products or collections viewed;
• cart value;
• promotional periods;
• session behavior; and
• merchant-defined targeting rules.

Offers may include percentage discounts, fixed-value discounts, or free shipping.

Where configured, ConversionPilot AI may also create store-synchronized, one-time-use discount codes for qualifying visitor sessions.

6. AI Bargaining Assistant

ConversionPilot AI may provide an AI-powered bargaining or negotiation feature that allows eligible shoppers to interact with an automated assistant regarding promotional pricing.

When a shopper uses this feature, ConversionPilot AI may process:

• shopper messages;
• offer requests;
• conversation responses;
• applicable product information;
• cart or session information;
• offer eligibility; and
• merchant-defined pricing boundaries.

The AI bargaining functionality operates according to limits and pricing boundaries established by the merchant. The documented App functionality also limits bargaining attempts.

ConversionPilot AI does not independently complete purchases on behalf of shoppers. Final purchases are completed through the merchant’s Shopify storefront and checkout process.

7. Popups and Spin-Wheel Campaigns

ConversionPilot AI provides merchants with promotional engagement tools, including dynamic popups and interactive spin-wheel campaigns.

Depending on the campaign configured by the merchant, visitors may voluntarily provide information such as:

• email address;
• phone number; or
• other information requested as part of a promotional campaign.

Spin-wheel campaigns may generate promotional rewards or discount codes and can be configured to limit participation by session.

ConversionPilot AI may process this information to operate the promotion, provide the visitor with the applicable reward, measure campaign performance, and provide campaign information to the merchant.

8. Order and Revenue Attribution

ConversionPilot AI may receive or process order-related information from Shopify to determine whether an offer or intervention contributed to a completed purchase.

This information is used to provide merchants with metrics such as:

• offer conversions;
• conversion rates;
• recovered revenue;
• product-level performance;
• offer performance; and
• attribution analytics.

ConversionPilot AI’s documented functionality uses Shopify order webhooks to associate completed checkouts with recent offer displays within a defined attribution window.

9. How We Use Information

ImpleVista may use information processed through ConversionPilot AI to:

• provide and operate the App;
• authenticate Shopify merchants;
• maintain Shopify integrations;
• identify visitor sessions;
• detect shopping friction;
• identify potential cart abandonment;
• detect exit intent;
• determine offer eligibility;
• display merchant-configured offers;
• generate discount codes;
• operate promotional popups;
• operate spin-wheel campaigns;
• provide AI bargaining functionality;
• control offer frequency;
• analyze offer performance;
• provide merchant dashboards;
• calculate conversion metrics;
• attribute revenue to offers;
• provide product-level insights;
• improve App functionality;
• recommend promotional strategies;
• troubleshoot technical problems;
• prevent abuse;
• enforce security controls;
• maintain the reliability of the Service;
• comply with legal requirements; and
• comply with applicable Shopify platform requirements.

We process information only where reasonably necessary to provide, secure, maintain, and improve ConversionPilot AI or where otherwise permitted or required by applicable law.

10. AI and Automated Processing

ConversionPilot AI uses automated systems and AI-powered functionality to analyze shopper behavior and help merchants deliver appropriate interventions.

Depending on App configuration, automated processing may be used to:

• detect behavioral friction;
• identify exit intent;
• identify potential cart abandonment;
• evaluate offer eligibility;
• recommend promotional offers;
• determine whether configured offers should be displayed;
• facilitate AI-powered bargaining within merchant-defined limits; and
• provide conversion and product insights.

Merchants maintain control over their promotional configurations, including applicable offer rules and pricing parameters.

11. How We Share Information

We do not sell personal information for monetary consideration.

Information may be shared or processed only where reasonably necessary to operate ConversionPilot AI, including with the following categories of recipients.

Shopify

ConversionPilot AI exchanges information with Shopify as necessary to authenticate merchants, access authorized store resources, manage applicable discounts, receive webhooks, support billing, and provide App functionality.

Service Providers

ImpleVista may use third-party infrastructure, hosting, database, security, monitoring, communications, analytics, AI, or other technology service providers to operate ConversionPilot AI.

Such providers may process information on our behalf only as necessary to provide their services to us and subject to applicable contractual and legal requirements.

Legal Requirements

We may disclose information where reasonably necessary to:

• comply with applicable law;
• comply with a lawful request or legal process;
• protect our legal rights;
• investigate fraud, security incidents, or abuse;
• enforce applicable agreements; or
• protect merchants, shoppers, ImpleVista, or others.

Business Transfers

If ImpleVista or ConversionPilot AI is involved in a merger, acquisition, restructuring, financing, or sale of all or part of its relevant business or assets, information may be transferred as part of that transaction subject to applicable privacy laws.

12. We Do Not Sell Customer Data

ImpleVista does not operate ConversionPilot AI for the purpose of selling merchant or shopper personal information.

Information collected through ConversionPilot AI is used to provide the App and related services, maintain security, provide analytics and functionality requested by merchants, and comply with applicable legal obligations.

13. Data Retention

We retain information only for as long as reasonably necessary to:

• provide ConversionPilot AI;
• maintain merchant accounts;
• provide analytics and attribution;
• fulfill contractual obligations;
• maintain security;
• prevent fraud and abuse;
• resolve disputes;
• comply with legal obligations; and
• fulfill applicable Shopify platform requirements.

When information is no longer reasonably required for these purposes, we may delete or anonymize it in accordance with our data-retention practices and applicable law.

Certain information may be retained for a longer period where required by law, necessary to establish or defend legal claims, prevent fraud, or comply with legitimate regulatory or contractual requirements.

14. App Uninstallation

When a merchant uninstalls ConversionPilot AI, Shopify may notify ImpleVista through Shopify’s app-uninstallation mechanisms.

After uninstallation, we will no longer process new storefront activity through the App for that merchant once the integration has been properly removed or disabled.

Information associated with the merchant may subsequently be deleted or anonymized in accordance with applicable Shopify requirements, legal obligations, and our data-retention practices.

15. Shopify Privacy and Data Requests

ConversionPilot AI is designed to support Shopify’s required privacy and data-request processes.

The App’s documented webhook handling includes:

• customers/data_request;
• customers/redact;
• shop/redact; and
• app/uninstalled.

These mechanisms allow ConversionPilot AI to respond to applicable customer data-access requests, customer data-deletion requests, shop data-deletion requests, and app uninstallations.

When we receive a valid privacy request through Shopify, we process the request in accordance with applicable legal and Shopify requirements.

16. Merchant Responsibilities

Shopify merchants using ConversionPilot AI are responsible for their own privacy practices and their compliance with applicable privacy, data-protection, consumer-protection, marketing, and electronic-communications laws.

Merchants are responsible for:

• maintaining an accurate privacy policy for their store;
• informing shoppers about relevant data processing;
• disclosing the use of cookies or tracking technologies where required;
• obtaining consent where required by law;
• respecting applicable privacy and opt-out choices;
• configuring ConversionPilot AI appropriately;
• ensuring promotional campaigns comply with applicable laws; and
• responding to customer privacy requests where required.

Where ConversionPilot AI processes shopper information on behalf of a merchant, the merchant generally determines the purposes for which the information is processed in connection with its store.

17. Data Security

ImpleVista uses reasonable technical, administrative, and organizational safeguards designed to protect information processed through ConversionPilot AI.

The App’s documented security architecture includes:

• Shopify OAuth authentication;
• session-token authentication;
• store-level tenant isolation;
• API token management;
• store-bound origin checks;
• rate limiting; and
• other measures designed to protect the App from unauthorized access and abuse.

However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

18. International Data Processing

ImpleVista operates ConversionPilot AI as an online software service. Information may therefore be processed or stored in countries or regions other than the country in which a merchant or shopper is located.

Where required by applicable law, ImpleVista will take appropriate measures designed to protect personal information transferred internationally.

By using ConversionPilot AI, merchants acknowledge that information may be processed in jurisdictions where ImpleVista or its service providers operate, subject to applicable data-protection requirements.

19. Your Privacy Rights

Depending on an individual’s location and applicable law, they may have certain rights regarding their personal information, including the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability where applicable;
• withdraw consent where processing relies on consent; and
• lodge a complaint with an appropriate data-protection authority.

These rights are subject to applicable legal limitations and exceptions.

20. Requests From Shopify Store Customers

ConversionPilot AI primarily provides services to Shopify merchants.

If you are a customer or visitor of a Shopify store that uses ConversionPilot AI and wish to exercise a privacy right regarding information associated with that store, you should normally contact the Shopify merchant directly.

The merchant may then submit or facilitate the appropriate request through Shopify or contact ImpleVista where our assistance is required.

We will reasonably assist merchants in responding to valid privacy requests where required by applicable law.

21. Children’s Privacy

ConversionPilot AI is a business application intended for Shopify merchants and is not designed specifically for children.

We do not knowingly use ConversionPilot AI to collect personal information directly from children in violation of applicable law.

If we become aware that personal information relating to a child has been processed improperly, we will take appropriate steps in accordance with applicable law.

22. Third-Party Services

ConversionPilot AI operates in connection with Shopify and may rely on third-party technology and infrastructure providers.

Those services may have their own privacy policies and terms governing their independent processing activities.

ImpleVista is not responsible for the independent privacy practices of third-party websites, applications, or services that are not controlled by ImpleVista.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to ConversionPilot AI;
• new or modified features;
• changes in our data practices;
• changes to Shopify platform requirements;
• changes to applicable laws or regulations; or
• security or operational requirements.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

Where required by applicable law, we may provide additional notice regarding material changes.

Continued use of ConversionPilot AI after an updated Privacy Policy becomes effective will be subject to the updated policy, to the extent permitted by applicable law.

24. Contact Us

If you have questions about this Privacy Policy, ConversionPilot AI’s privacy practices, or a privacy-related request, please contact:

ImpleVista
Product: ConversionPilot AI
Website: www.implevista.com
Email: info@implevista.com

For privacy requests relating to a specific Shopify store, please include the relevant Shopify store domain and sufficient information to allow us to identify and process the request.