Privacy Policy

1. Introduction

Search Sight ("we", "us", or "our") operates the Search Sight dashboard at searchsight.co, the Search Sight WooCommerce plugin, and the Search Sight Shopify app (collectively, the "Services"). All of these Services share the same underlying infrastructure and database.

This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights regarding your data. By using any of our Services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

For questions or requests, contact us at [email protected].

2. Who This Policy Applies To

This policy applies to:

• Merchants — business owners who register a Search Sight account and connect their WooCommerce or Shopify store.
• End Customers — shoppers who interact with Search Sight's search widget embedded in a merchant's store.
• Visitors — anyone who visits searchsight.co without creating an account.

3. Data We Collect

3.1 Account & Merchant Data

When you create a Search Sight account, we collect:

• Full name and email address
• Password (stored as a one-way cryptographic hash — never in plain text)
• Stripe customer ID and subscription status, for billing purposes

3.2 Store & Product Data

To deliver the search service, we synchronise product data from your WooCommerce or Shopify store into our search engine (Meilisearch). This includes:

• Store name and domain URL
• API keys used to authenticate between your store and our service
• Product catalogue data: product names, descriptions, SKUs, prices, stock status, images, categories, and tags
• Search merchandising configuration: synonyms, featured product rules, search redirections, and promotional banners

This data is stored in our database and in Meilisearch. It is used solely to power search results on your store.

3.3 Search & Analytics Event Data (End Customers)

When a shopper uses the Search Sight widget on a merchant's store, we collect anonymised behavioural events:

• Search events — the search query, number of results returned, and timestamp
• Click events — which product was clicked and which query preceded that click
• Add-to-cart events — the product ID added to the cart following a search
• Purchase events — the order value and product IDs in an order that resulted from a search

We do not collect the end customer's name, email address, or any personal identifier. Events are linked only to an anonymous session or product ID. This data is used exclusively to produce analytics reports visible to the merchant inside their Search Sight dashboard.

3.4 Technical & Usage Data

Like most web services, our servers automatically log standard technical information when you access the Services, including IP address, browser type, referring URL, and pages visited. This data is used for security monitoring, abuse prevention, and aggregate service diagnostics. It is not sold or shared with third parties for marketing purposes.

4. Shopify App — Additional Disclosures

The Search Sight Shopify app is listed on the Shopify App Store and operates under the same account and database as the WooCommerce plugin. When you install the Shopify app:

• We request only the Shopify API scopes necessary to read product data and, where applicable, receive webhook notifications for order/cart events used in analytics.
• Your Shopify store's product catalogue is synced to Meilisearch in exactly the same way as a WooCommerce store.
• Search and conversion events are tracked in the same anonymised format described in Section 3.3.
• Uninstalling the Shopify app from your Shopify admin will stop any further data sync. You may request deletion of all stored data by contacting [email protected].

We comply with Shopify's App Requirements and the Shopify Partner Programme policies.

5. How We Use Your Data

We use the data we collect to:

• Create and manage your account
• Provide, operate, and improve the search service
• Process payments and manage your subscription via Stripe
• Generate analytics dashboards visible only to you (the merchant)
• Send transactional emails (e.g. payment receipts, subscription alerts) — we do not send unsolicited marketing emails
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with applicable legal obligations

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal data on the following legal bases:

• Contract performance — processing your account data and product data is necessary to provide the Services you have requested.
• Legitimate interests — we process technical and usage data to keep our Services secure and to improve them.
• Legal obligation — we may retain certain records as required by applicable law.

7. Data Sharing & Third Parties

We do not sell your data. We share data only with the following trusted sub-processors:

We may also disclose data where required by law, regulation, or a valid legal process, or to protect the safety, rights, or property of Search Sight, our users, or the public.

8. Data Retention

• Account data — retained for as long as your account is active. Deleted upon account deletion request.
• Product & store data — retained while your store is connected. Removed from our search index within 30 days of store deletion.
• Analytics events — retained for up to 24 months to provide meaningful trend analysis, then permanently deleted.
• Billing records — retained for 7 years as required for tax and financial compliance.

9. Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords hashed using industry-standard algorithms (bcrypt)
• Data in transit encrypted with TLS (HTTPS)
• Database access restricted to authorised application processes
• API keys scoped to individual stores; keys can be regenerated at any time from your dashboard

No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at [email protected].

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to limit processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email [email protected]. We will respond within 30 days.

If you are in the EEA or UK and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority.

11. Cookies

The Search Sight dashboard uses minimal cookies and browser storage:

• Authentication token — stored in localStorage to keep you signed in. Cleared on logout.
• Theme preference — stored in localStorage (light/dark mode). No tracking value.

The Search Sight search widget embedded in merchant stores does not set cookies on end customers. Session data used for analytics is stored server-side and linked to an anonymous identifier only.

12. Children's Privacy

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify active account holders by email. Continued use of the Services after changes constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, requests, or concerns: