Privacy policy

Last updated 15 November 2026

Stelyn AI Search & Filters ("Stelyn") is a Shopify app made by Shellback Private Limited, India ("we", "us"). This policy explains what Stelyn handles for the stores that install it ("merchants") and for the people who shop on those stores ("shoppers"). Questions: hello@shellback.si.

What we get from Shopify about the merchant's store

  • Product information: titles, descriptions, prices, images, options, tags, vendors, product types, collections and stock levels. We use it to run search and filters.
  • Store details: the store's name, address on myshopify.com and its own domain, the store's email and contact email, and its currency. We use these to run the app and, if Back in stock is on, to send alerts in the store's name.
  • Which theme is live, so the app embed can show search in the right places.
  • The plan the merchant chose, through Shopify's billing.

Stelyn asks Shopify only for read access to products, inventory, locations, publications and themes. It cannot read or change orders, and it cannot change products, prices or customers.

What we handle about shoppers

  • Searches. The words typed into search, how many results came back, which product was clicked, and when. These are not linked to a name, email or account. Merchants see them as search reports.
  • Back in stock requests (only if the merchant uses the Back in stock add-on). When a shopper asks to be told about a sold-out product, we store their email address, the product, and when they asked. We send them one email when it is back. Every email has an unsubscribe link. The merchant can see and export these requests.
  • Abuse protection. To stop floods of fake requests, we keep a salted, one-way scrambled form of the visitor's IP address for at most one day.

Stelyn does not set advertising cookies, does not build shopper profiles, and does not sell or rent any data.

AI search

If a merchant uses the AI search add-on, product text and search words are turned into number lists ("embeddings") by an AI model run on Cloudflare Workers AI, so that search can match meaning. No shopper's name, email or account goes to the model. The data is not used to train AI models.

Who processes the data for us

  • Cloudflare: runs the app and the AI model.
  • Neon: our database, hosted in Singapore.
  • Resend: sends Back in stock emails.
  • Shopify: the platform the app runs on, and billing.

How long we keep it

  • When a merchant uninstalls Stelyn, we delete our copy of their products straight away.
  • When Shopify asks us to delete a store's data (48 hours after uninstall), we delete everything about that store, including search reports and Back in stock requests.
  • When Shopify asks us to delete a shopper's data, we delete that shopper's Back in stock requests for that store.
  • Speed and error logs are deleted after 14 days.

Your choices

Shoppers can unsubscribe from Back in stock emails with the link in any email, or ask the store to delete their data. Merchants can turn the app off in the theme editor at any time, or uninstall it. For any request about data we hold, email hello@shellback.si.

Changes

If we change this policy we will update the date at the top of this page.