WellChosen privacy policy
This policy explains what data WellChosen collects when a merchant installs it on a Shopify store, why, where it is kept, and how it is deleted. WellChosen is a Shopify app made by Signal Beats Noise, Newbury House, Chilton Foliat, Wiltshire, RG17 0TG ("we", "us"). It was called Hinted until October 2026.
In short: WellChosen stores your store's product and inventory data and a log of gift search queries. It does not store personal data about your customers.
1. What we collect
Store and access data
When you install WellChosen, Shopify gives us your store's myshopify.com domain and an access token that lets the app read your products and inventory. We store these, together with the permissions you granted and the state of your catalogue sync.
Product and inventory data
WellChosen reads your active products through the Shopify Admin API with the read_products and read_inventory permissions. For each product we store its title, description, product type, vendor, tags, main image, price range, currency, whether it is available for sale, its Online Store address, and its variants' titles, SKUs, prices and availability. This keeps suggestions in line with what you can actually sell.
Query logs
When a shopper uses WellChosen on your storefront, we receive the text they type. We keep a normalised copy of each query with the products suggested for it, so repeat searches are fast, and we count queries per month for usage limits and billing.
What we do not collect
WellChosen does not store names, email addresses, postal addresses, phone numbers, order history, payment details, IP addresses, cookies or Shopify customer IDs for your shoppers. WellChosen does not ask the Shopify API for any customer or order data. Queries are not linked to the person who typed them. Shoppers are asked to describe the recipient, not themselves, but because a query is free text, someone could still type a name or other detail. Such text is handled as part of the query log described above and deleted on the same schedule.
2. Why we use it
- To suggest products from your catalogue that match a shopper's description.
- To keep your catalogue copy up to date as products and stock change.
- To count usage against your plan and bill through Shopify.
- To troubleshoot problems and improve the quality of suggestions.
Our lawful basis under UK GDPR is the performance of our contract with you, the merchant, and our legitimate interest in running and improving the service. We do not sell data, use it for advertising, or share it with anyone except the providers listed below.
3. Where it is hosted
WellChosen runs on Fly.io. The application and its Postgres database are hosted in Fly.io's London region, in the United Kingdom. Data is encrypted in transit with HTTPS, and access to production systems is restricted to us.
4. AI provider
Jev (TypeSafe AI, Inc.): matches shopper requests to products. For each search it receives the text the shopper typed and details of candidate products from the store's catalogue (title, type, price, tags and description). It never receives information that identifies the shopper or the store's customers. TypeSafe processes this data in the United States, does not use it to train or improve its models, and keeps it only as long as needed to provide the service.
Service providers
| Provider | Purpose | Location |
|---|---|---|
| Fly.io | Application hosting and database | London, UK |
| Jev | AI matching of queries to products | United States |
| Shopify | App platform, data access and billing | See Shopify's privacy policy |
5. How long we keep it
- Store, access, product and inventory data: for as long as WellChosen is installed. Products you delete or unpublish are removed at the next update or sync.
- Search text: a normalised copy of each search and the products suggested for it are kept for up to 12 hours so repeat searches load quickly, then deleted automatically. Search text is not written to our logs.
- Monthly usage counts: for as long as WellChosen is installed, as a record of usage against your plan.
6. Deletion when you uninstall
When you uninstall WellChosen, Shopify notifies us and we delete all data held for your store: the access token, the product and inventory copy, query logs and usage counts. Backups held by our hosting provider expire on their normal rolling schedule, after which the data is gone from them too.
7. Shopify GDPR webhooks
WellChosen subscribes to Shopify's three mandatory privacy webhooks and handles them as follows.
customers/data_request: Shopify sends this when a customer asks a store for their data. WellChosen stores no customer personal data, so there is nothing to return. We acknowledge the request, and the merchant can contact us if they need written confirmation.customers/redact: Shopify sends this when a customer asks a store to erase their data. WellChosen holds nothing linked to a customer, so there is nothing to delete. We acknowledge the request.shop/redact: Shopify sends this 48 hours after a store uninstalls the app. We delete every remaining record for that store, if any is left after the uninstall deletion described above.
8. Your rights
Under UK GDPR you can ask to access, correct or delete personal data we hold about you, or object to how we use it. For merchants, this mostly means your store's account with us. Shoppers should contact the store they used first, because the store controls its own customer data; we will help the store respond where we can.
If you are unhappy with how we handle data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.
9. Contact
For any privacy question or request, email privacy@signalbeatsnoise.com or write to Signal Beats Noise, Newbury House, Chilton Foliat, Wiltshire, RG17 0TG. We reply within one month, as UK GDPR requires.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell merchants in the app or by email before it takes effect.