Privacy Policy

What ACO reads from your store

When you install ACO, you grant it the following Shopify access scopes. ACO requests only what it needs to function.

• read_products — syncs your catalog: product titles, prices, inventory levels, images, and categories.
• read_orders and read_draft_orders — receives order webhooks to record which products converted. No customer name, email, or address is stored.
• read_themes — scans your active theme to detect where recommendation surfaces are placed.
• write_pixels and read_customer_events — installs a Shopify custom pixel on your storefront to emit behavioral events.

Shopper behavior events

The ACO pixel fires events when shoppers interact with recommendation surfaces. No personally identifiable information is attached to any event.

• impression — a surface became visible in the shopper's viewport.
• click — the shopper clicked a product within a surface.
• hover — engagement signal from product hover.
• decision — ACO served a ranked product list to a surface.
• conversion — an order was completed and linked back to the recommendation session.

Shopper identifiers

ACO uses two opaque, store-scoped tokens to stitch events together. Neither token is linked to a Shopify customer account, email, or any external identity.

• _aco_shopper_id — persists across sessions for the same browser on the same store.
• _aco_session_id — short-lived token scoped to a single browser session.

There is no cross-store tracking.

Where data lives

ACO routes data through regional edge-v2 clusters, ClickHouse, and PostgreSQL infrastructure.

• AWS-hosted edge-v2 — decisions are handled in regional clusters close to your shoppers.
• ClickHouse — raw behavioral events are stored for signal computation.
• PostgreSQL — catalog, surfaces, policies, and computed signals.

How data is used

Behavioral events are aggregated into per-product signals and used exclusively to rank products on your store's surfaces. ACO does not use your store's data to influence rankings on any other store.

Uninstall and data deletion

When you uninstall ACO from Shopify, a deletion job removes all data associated with your store — catalog records, behavioral events, computed signals, surfaces, and policies. The pixel is also removed from your storefront.