Privacy Policy

Overview

MCP Command – AI Store Control (“the App”) is a Shopify app that lets a merchant connect AI assistants (for example Claude, ChatGPT, Cursor or the Gemini API) to their Shopify store through the Model Context Protocol (MCP), subject to permissions the merchant sets in the App. This policy explains what data we process when a merchant installs and uses the App.

1. Data we process

a) Merchant and store data (from Shopify on install)

Store domain and name, the store owner’s contact email, the store’s currency and plan, and the App’s Shopify access token (stored encrypted, never shared). Purpose: operating the App, billing through Shopify, support.

b) AI connection data

For every AI client the merchant connects: client name and type, OAuth client registration data, hashed access and refresh tokens, creation and last-use timestamps. Purpose: authenticating the merchant’s AI client and letting the merchant revoke it.

c) Permissions and approvals

The merchant’s permission settings per capability and, for changes that require approval, the proposed change (before/after values) until the merchant decides. Purpose: the App’s core function.

d) Activity log

For every request an AI client makes: connection, tool, timestamp, outcome, and a bounded copy of the request and response. Customer email, phone and address fields are masked before the log is written. Purpose: giving merchants an audit trail of what their AI did; security.

e) Customer data of the merchant’s store

When the merchant’s AI client uses a tool, the App reads or writes store data on the merchant’s behalf through Shopify’s API, including order and customer records (name, email, phone, address, order contents). This data is passed to the merchant’s AI client in the merchant’s session. Apart from the masked activity log and pending approvals described above, the App does not store customer data. We access protected customer data only with Shopify’s approval and only for the App’s functionality.

2. What we do not do

We do not sell personal data, do not use store or customer data for advertising, profiling, analytics products or AI model training, and do not share it with anyone except the sub-processors listed below. The AI provider the merchant connects (Anthropic, OpenAI, Google, Cursor or another MCP client) receives data only because the merchant connected it; that provider’s own privacy terms apply to what it does with the data.

3. Sub-processors

4. Retention and deletion

• Activity log: 30 days (Free), 90 days (Starter), 365 days (Pro).
• Finished approvals: 30 days; expired approvals: 7 days.
• Expired OAuth codes and tokens: 1 day; unused OAuth clients: 7 days.
• Uninstall: all data of the store is deleted 48 hours after Shopify’s shop/redact notice.
• Customer requests through Shopify (customers/data_request, customers/redact) are honoured within 30 days; identifiers are scrubbed from stored payloads.

5. Security

TLS for all connections; encryption at rest for the database and backups; tokens stored as one-way hashes; OAuth 2.1 with PKCE for AI connections; per-store isolation; access limited to the operator with two-factor authentication; an incident response process with notification within 72 hours.

6. Your rights

Merchants and their customers may request access, correction, deletion or export of personal data by writing to support@mcpcommand.app. EU/EEA and UK residents have the rights set out in the GDPR/UK GDPR, including the right to complain to a supervisory authority; California residents have the rights set out in the CCPA/CPRA. We act as a processor for the merchant’s store and customer data and as a controller for merchant account data.

7. Changes

We will post changes on this page and update the date above. Material changes are announced in the App.