What we collect, and what we don't.

1. The short version

• The free audit and the Claude connector need no account and no sign-in. We do not know who you are.
• You give us a store address. We read that store's public pages — the same pages any visitor or search engine can see.
• We do not store your IP address. It is held in memory only, to count requests for rate limiting, and is gone when the process restarts.
• We do not set cookies for the audit tool or the connector.
• We keep the audit reports we generate. You can ask us to delete one.

2. What we collect

When you run an audit (website or Claude connector):

• What you submit — a store domain, or a link to one product page.
• Public page content from that store — product titles, descriptions, prices, images, and the store's own structured product data. Only pages that are publicly reachable without logging in.
• What we generate — the rewritten copy, the analysis, and any rebuilt product image.
• Timestamps and whether the request came from the website or the connector.

We do not receive, and cannot see, anything from inside a store's admin: no orders, no customers, no payment data, no analytics. The audit has no access to any Shopify account.

What we deliberately do not keep:

• IP addresses. Used in memory to enforce rate limits, never written to our database.
• Any identifier for you. There is no account, no user ID, and no cookie linking one audit to another.

When you browse this website: we use Google Analytics to count page views and understand which pages are useful. That is standard web analytics, and it is separate from the audit tool.

3. How we use it

• To produce the audit you asked for, and to show it to you.
• To let you reopen a result later using its link.
• To enforce rate limits and daily caps, so the free tool stays available and affordable.
• To find and fix bugs, and to understand which parts of the audit are useful.

We do not sell your data, and we do not use audit content to advertise to you — there is no "you" for us to advertise to.

4. Who we share it with

Running an audit means passing the store's public page content to services that do the work:

• Firecrawl — fetches the public storefront pages for us.
• Google (Gemini API) — analyses the page, writes the new copy, and generates the rebuilt image. Page content and product images are sent to this API.
• Google Cloud Platform — hosts our servers, database, and the storage bucket that holds generated images.
• Google Analytics — website usage only, not audit content.

That is the complete list. We share nothing with advertisers, data brokers, or anyone else, and we do not sell data to anyone.

5. Audit results are shareable by link

Every audit gets an unguessable ID, and the result page is reachable by anyone who has that link. That is intentional — it is how you share a report with a colleague. Two things follow from it:

• The link is the only key. Treat it the way you would treat any share link.
• Result pages are marked noindex and are not submitted to search engines.

6. Auditing a store you don't own

Nothing stops someone from auditing a store they do not own — the tool only reads pages that are already public, exactly as a browser or a search engine crawler would. We do not bypass logins, passwords, or any access control.

If you are a store owner and want a report about your store deleted, or want your domain blocked from future audits, email us and we will do it. You do not need to explain why.

7. How long we keep it

We keep audit results indefinitely — we do not currently delete them on a schedule. We would rather say that plainly than publish a retention period we do not actually enforce.

You can have any result deleted on request. Email hi@a.xyz with the result link or the store domain, and we will delete the report and any images generated for it. A person reads that inbox.

Rate-limiting counters live in memory and disappear on restart, so there is nothing to delete there.

8. Security

• Everything runs over HTTPS.
• Servers, database, and storage run on Google Cloud Platform.
• Because the audit never touches a Shopify admin, there are no store credentials or access tokens involved in any of it.

If you find a security problem, email hi@a.xyz. We will reply.

9. Children

Arvio is a tool for online shops. It is not directed at children, and we do not knowingly collect anything from them.

10. Changes

If we change what we collect, who we share it with, or how long we keep it, we will update this page and change the date at the top. The date is the honest signal — we do not quietly edit around it.

11. Contact

Adot Technologies Inc — hi@a.xyz

Deletion requests, questions about anything above, or a disagreement with how we have handled something: same address, and a person reads it.