Privacy Policy

Last updated: September 2026

About Autonoma

Autonoma ("we", "us", "our") is a Shopify application operated by ON Technologies Pty Ltd (Australia). Autonoma automates store growth for Shopify merchants: product and page creation, image and video ad creative, ad publishing, split testing, upsell building and an AI assistant. This policy explains what data we collect, why we collect it, how it is stored, and your rights.

Data we collect

• Store data from Shopify — your shop domain, products, pages, collections, theme content, orders summary metrics and store settings, accessed through the permissions you grant during installation.
• Account credentials — the Shopify OAuth access token for your store, and (if you connect it) a Meta access token for your ad account, Facebook Page, Pixel and Instagram account.
• Content you create in the app — prompts, chat messages, uploaded images and videos, generated products, pages, ads, advertorials, split tests and their results.
• Usage and billing data — your plan, feature usage counters, and job history, used to operate quotas and Shopify billing.
• Mobile app data — if you pair the Autonoma Mobile app: a device identifier, device label and push notification token.
• Marketing site cookies — this website uses only essential cookies. If analytics are enabled, they are anonymized (see "Cookies" below).

Why we collect it

We use your data exclusively to provide the service: to build products and pages in your store, to generate and publish ad creative, to run split tests, to send you notifications about job status, and to bill your subscription through Shopify. We do not sell your data, and we do not use your customers' personal data to train AI models.

Third-party processors

To deliver AI-generated content, parts of your store data (product titles, descriptions, images, and content you submit) are processed by the following providers:

• Shopify — store platform and billing.
• Meta — ad publishing, if you connect a Meta account.
• Anthropic (Claude) — text generation and the AI assistant.
• fal.ai — image and video generation infrastructure.
• Google (Veo) — video ad generation.
• Nano Banana — image generation.
• Higgsfield — image generation.
• ElevenLabs — voiceover generation.
• OpenAI (Whisper) — caption transcription for video ads.
• Expo — mobile push notification delivery.

Each provider receives only the data required for its task. None of them receive your Shopify or Meta credentials.

How your data is stored

Data is stored on managed cloud infrastructure (Railway — application servers and PostgreSQL database; Redis for short-lived operational state; Cloudflare for content delivery). Access tokens and other sensitive credentials are encrypted at rest. Access to production systems is restricted to authorized personnel.

Data retention

We retain your data while your store has Autonoma installed. When you uninstall, Shopify's data-removal webhook triggers cleanup of your data, completed within 30 days. Billing records are retained for 7 years as required by Australian tax law. See our data deletion page for details.

Your rights

You may request a copy of the data we hold about your store, correction of inaccurate data, or deletion of your data at any time. Uninstalling the app triggers deletion automatically; you can also email us directly. If you are in a jurisdiction with specific privacy rights (e.g. GDPR, Australian Privacy Principles), we will honor requests consistent with that law.

Cookies on this website

The marketing site (tryautonoma.app) sets no tracking cookies by default. If Google Analytics is enabled, IP anonymization is applied and no cross-site advertising identifiers are used. The embedded Shopify app uses session cookies strictly for authentication.

Governing law

This policy is governed by the laws of Australia.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced inside the app. The "Last updated" date above always reflects the current version.

Contact

For privacy questions or requests: [email protected]