Privacy Policy
Effective date: April 21, 2026
Shopwalk Inc. ("Shopwalk," "we," "us") operates the Shopwalk AI commerce network, including the website at shopwalk.com, the MCP endpoint at mcp.shopwalk.com, and the Universal Commerce Protocol (UCP) plugins. This Privacy Policy explains what data we collect, how we use it, and the choices you have.
What Data We Collect
Store data via UCP plugin
When a merchant installs a UCP plugin (WooCommerce, Magento, PrestaShop, or OpenCart), the plugin syncs product catalog data to the Shopwalk network. This includes product names, descriptions, images, prices, categories, stock status, and store metadata such as the store name and URL.
Account information
When you create a Shopwalk account — whether as a partner (merchant), account holder (shopper or AI agent operator), or affiliate — we collect the information you provide: name, email address, and optional organization details. If you subscribe to a paid plan, Stripe collects and processes your payment information on our behalf.
Usage analytics
We collect standard usage data such as pages viewed, API calls made, feature usage, and performance metrics. This data is aggregated and used to improve the service.
How We Use Your Data
Product indexing and AI discovery — catalog data is converted into semantic vectors so AI agents can search, compare, and recommend products across the network.
Analytics and reporting — we provide merchants with anonymized traffic and conversion insights.
Service improvement — usage data helps us optimize performance, identify bugs, and develop new features.
Communication — we use your email to send transactional messages (order confirmations, account alerts) and, with your consent, occasional product updates.
What We Do Not Collect
We are intentional about what we leave alone:
Payment credentials — Shopwalk never processes, stores, or has access to credit card numbers, bank accounts, or payment tokens. All payments flow directly through Stripe.
Customer PII from stores — the UCP plugin syncs product catalog data only. We do not access, collect, or store your customers' personal information such as names, emails, addresses, or order histories.
Admin access to your store — the UCP plugin operates with read-only catalog permissions. We never request or store admin credentials for your e-commerce platform.
Data Storage and Security
All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Our infrastructure is hosted in the United States. We use industry-standard security practices including network isolation, access controls, and regular security reviews.
Third-Party Services
We use a small number of trusted third-party services to operate Shopwalk:
Stripe — payment processing for subscriptions. Stripe's privacy policy governs how they handle payment data.
SendGrid — transactional email delivery (account confirmations, alerts).
Cloudflare — CDN, DDoS protection, and DNS routing.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
Cookies
Shopwalk uses httpOnly session cookies to authenticate your account and maintain your session. These cookies are strictly functional and cannot be read by client-side JavaScript.
We do not use tracking cookies, advertising pixels, or third-party analytics cookies. We do not participate in cross-site tracking or retargeting.
Data Retention and Deletion
We retain your account data for as long as your account is active. Product catalog data synced via UCP is retained while the plugin connection is active and is purged within 30 days of disconnection.
You may request deletion of your account and all associated data at any time by contacting privacy@shopwalk.com or through your account settings. We will process deletion requests within 30 days.
Your Rights (CCPA / GDPR)
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right to access — request a copy of the personal data we hold about you.
Right to correction — request correction of inaccurate data.
Right to deletion — request that we delete your personal data.
Right to portability — receive your data in a structured, machine-readable format.
Right to opt out — California residents may opt out of the sale of personal information. We do not sell personal information, but you may still exercise this right by contacting us.
To exercise any of these rights, contact us at privacy@shopwalk.com. We will respond within the timeframe required by applicable law (30 days for CCPA, 30 days for GDPR).
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website. Your continued use of Shopwalk after changes are posted constitutes acceptance of the updated policy.
Contact
If you have questions about this Privacy Policy or your data, contact us at:
Shopwalk Inc.
Email: privacy@shopwalk.com