Privacy Policy

1. About MerishAI

MerishAI is an AI-powered growth platform for Shopify store owners, operated by EMDAF Technologies Private Limited, a company incorporated in India. This Privacy Policy explains how we collect, use, and protect your information when you use our platform at dev.plancknow.com.

By using MerishAI, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account Information

• Name and email address when you register
• Mobile number for account verification via WhatsApp OTP
• Password (stored as a secure hash — we never store plain-text passwords)
• Google account information if you sign in with Google

Store & Business Information

• Shopify store URL and API credentials you provide
• Product data synced from your Shopify store
• Business profile details (category, description, target audience)

Connected Platform Accounts

• OAuth tokens for platforms you connect (YouTube, Instagram, Facebook, Google Ads)
• These tokens are encrypted at rest and used only to perform actions you explicitly authorise

Usage Data

• Login history (timestamp, IP address, device)
• Actions taken within the platform (content generated, campaigns created)
• Performance analytics from your connected platforms

3. How We Use Your Information

• To operate and improve the MerishAI platform
• To generate AI-powered content and insights for your store
• To publish content and manage ad campaigns on your behalf, using your connected accounts
• To send transactional emails (account setup, password reset, billing invoices) where you have given consent
• To detect and prevent fraud or abuse
• To comply with applicable laws and regulations

We do not sell your personal data to third parties. We do not use your data to train AI models for other customers without your explicit consent.

3a. Email Consent & Notifications

During account setup, you may opt in to receive account and billing notifications by email. If you consent, we may send you:

• Subscription confirmation and renewal receipts
• Payment failure and subscription status alerts
• Credit purchase receipts
• Account alerts — including a notification if the MerishAI app is uninstalled from your Shopify store, with information about the 48-hour data retention window

Consent is optional and can be withdrawn at any time by contacting ad@merishai.com. We will never send promotional or marketing emails without a separate opt-in.

4. Third-Party Services

We use the following third-party services to operate the platform:

Each of these services has its own privacy policy. We encourage you to review them.

5. Data Storage & Security

• All data is stored on servers in Google Cloud Platform (asia-south1 region — Mumbai, India)
• OAuth tokens and API credentials are encrypted at rest using AES-256 encryption
• All data in transit is encrypted using TLS 1.2 or higher
• Access to production data is restricted to authorised personnel only

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. billing records for GST compliance).

Shopify App Uninstall

If you uninstall the MerishAI app from your Shopify store, your account is immediately paused and you will no longer be able to log in. Your store data is preserved for 48 hours. If you reinstall the app within that window, your account and all data are fully restored. After 48 hours, Shopify notifies us to permanently delete your store data per their mandatory data privacy requirements. This deletion is irreversible — reinstalling after 48 hours starts a fresh account.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Disconnect any connected platform account at any time from your store settings
• Export your data in a portable format

To exercise any of these rights, contact us at ad@merishai.com.

8. Cookies

We use a session cookie (access_token) to keep you logged in. We also use third-party cookies for analytics, support (Tawk.to), and advertising (Meta Pixel, Google Tag) to improve our services and show relevant ads. You can manage your cookie preferences at any time via the cookie consent banner.

9. Children's Privacy

MerishAI is intended for business use only. We do not knowingly collect data from individuals under the age of 18.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email for material changes. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us