Data and Privacy: How ABConvert Handles Your Shoppers' Data

ABConvert processes your shoppers’ browsing and order events, on your behalf, only to run and measure your tests.

​

What we collect

When a shopper visits your store, ABConvert records the events it needs to assign them to a test group and measure the result:

• Identifiers. An ABConvert visitor ID and session ID, your store’s Shopify session cookies, and the shopper’s IP address. The IP address is stored with each event and used for country lookup and bot filtering.
• Browser and page. User agent, device type, referring URL, landing page and its query parameters, and the pages viewed.
• Events. Page views, product views, add to cart, checkout, orders, and which test group the shopper was assigned to.
• Orders. Order ID, order value, currency, products and quantities, shipping rate, discounts used, and the country and province of the order.

​

What we never collect

Shopper names, email addresses, phone numbers and street addresses. ABConvert does not read these fields from your store, and none of them are used to assign test groups or to measure your results. The one exception is Shopify’s own privacy requests: when a shopper asks to see or delete their data, Shopify sends us a request that can include that shopper’s email address and phone number, and we store the request so we can act on it.

​

What we use it for

• Assign each shopper to one test group and show them the same version on every visit.
• Apply the test itself: a price, shipping rate, theme, template, checkout or offer change.
• Measure and report test results.
• Suggest tests for your store, based on your own order patterns such as average order value, discount use and repeat purchases.
• Filter bot traffic.
• Keep the app secure and support you when something goes wrong.

​

What we never do

• We never sell or share your shoppers’ data, and we never use it for advertising.
• We never send shopper personal data to AI providers. No IP addresses, identifiers or individual shopper events leave for a model.
• We never train or fine-tune AI models on your data.
• We never show one store’s data to another store, and nothing that identifies your store is used to serve another store.

​

How we use AI

ABConvert uses Anthropic’s models, through their API, in three places. None of them receive shopper personal data, and we do not train or fine-tune any model on your data.

• Summaries of your results. When a test ends, a model writes the plain-language summary from the per-test-group statistics and the test name, hypothesis and goal you entered.
• Suggestions for your store. When ABConvert suggests a test for your store, the suggestion comes from your own order patterns: average order value, how often discounts are used, repeat purchase rate and shipping thresholds. These are computed as statistics first. No individual order or shopper is sent to a model.
• Learning across stores. To make suggestions better for stores like yours, we look at aggregated test outcomes across many stores: which kinds of tests tend to win for which kinds of stores, by test type, order value band, plan and how often a store tests. This uses test results and store-level statistics, never shopper data, and nothing that identifies your store appears in what we learn or show to anyone else.

Cross-store learning is how suggestions get better over time. It is the one place your store’s test outcomes are used beyond your own store.

​

Who else sees it

A short list of providers stores or transmits shopper data on our behalf: our database and hosting providers, our analytics warehouse, the network proxy in front of our tracking endpoint, and our error-monitoring service. The current list, with what each one sees and where, is published with the Data Processing Agreement.

​

Integrations you connect

Some data leaves ABConvert because you asked it to. Google Analytics 4, Segment, Hotjar, Microsoft Clarity and Heatmap receive the test group name so you can segment your own reports. Klaviyo segment checks use your Klaviyo key. CSV export, the ABConvert API and MCP clients hand per-order rows to whichever tool you connect. These go through your own accounts, under your agreements with those providers.

​

Where it is stored and how it is protected

Your data lives with our hosting providers, MongoDB Atlas, Linode and Google Cloud, and is encrypted in transit. Every record is tagged with your store, so one store’s data is never mixed with another’s. Production access is limited to the ABConvert staff whose job needs it.

​

How long we keep it

Records are deleted automatically once they pass these limits.

​

When you uninstall

ABConvert stops collecting the moment you uninstall. Your stored data is then removed on the schedule above, whether or not you reinstall. To have it removed sooner, email [email protected] from your store’s owner address and we delete it within 30 days.

​

Shopper privacy requests

When a shopper asks you to see or delete their data, you handle the request in Shopify as usual. Shopify forwards it to every app on your store, including ABConvert. To make sure the ABConvert copy is removed, email [email protected] with the order IDs and we delete them within 30 days. We never contact your shoppers directly. If a shopper contacts us, we forward the request to you within five business days.

​

If something goes wrong

If we discover a security incident affecting your shoppers’ data, we tell you within 24 hours of finding out, then keep you updated as we learn more. That leaves you time for your own notices.

​

FAQ

Does ABConvert set cookies on my storefront?

ABConvert stores its visitor and session identifiers in the browser so a shopper sees the same test group on every visit. It also reads your store’s Shopify session cookies to match events to orders. Your cookie notice is your responsibility, as it is for every app on your store.

Is ABConvert GDPR compliant?

ABConvert acts as your processor: it handles shopper data only on your instructions and only to run your tests. The Data Processing Agreement sets out the commitments above in legal form, including EU standard contractual clauses where they apply. Email [email protected] for a copy.

Can I get a signed Data Processing Agreement?

Yes. Email [email protected] from your store’s owner address and we send a countersigned copy.

Does ABConvert use my sales data to train AI?

We do not train or fine-tune AI models on your data. We do use AI to summarise your results and to suggest tests for your store from your own order statistics, and we learn across stores from aggregated test outcomes so suggestions improve for stores like yours. No shopper personal data is involved in any of this. See How we use AI.