EcomXray — Privacy Policy

Who we are

EcomXray and the EcomOS platform are operated by aMemory ApS, the data controller for the data described in this policy. You can reach us at privacy@ecomos.dk (privacy) or support@ecomos.dk (support).

Overview

EcomXray (the “Extension”) is a Chrome extension and part of the EcomOS platform. It displays a merchant’s own Shopify product analytics — cost price, gross margin, units sold, restock recommendations and related metrics — as an optional overlay on the merchant’s storefront product pages, and lets the merchant edit their own product fields. It is a tool for store owners and their staff to view and manage their own store data while browsing their storefront.

Who this is for

EcomXray is for Shopify store owners and their authorized staff. It is not intended for, and does not collect data about, the end shoppers or visitors of a storefront.

What the Extension accesses

• API token. You generate an EcomXray API token in EcomOS (app.ecomos.dk) and paste it into the Extension. The token authenticates requests to your own EcomOS account.
• Current product context. On a storefront product page, the Extension reads the product handle from the page URL (and the shop domain) to look up that product’s analytics.
• Custom storefront domain (optional). If you operate on a custom domain, you may enter it so the Extension can run there.
• UI preference. The position of the floating launcher button.

The Extension does not read or collect your browsing history, personal information about you or your customers, payment or card details, form inputs, passwords, cookies, or the content of pages other than the product handle on the storefront product pages where it runs.

What is transmitted, and to whom

The Extension communicates only with the EcomOS backend at https://app.ecomos.dk(first party, operated by the same provider as the Extension). For each product you view, it sends the product handle and shop domain, authenticated with your API token, and receives that product’s analytics for display. When you edit a field from the panel (for example price, cost or SEO), the change is sent to EcomOS, which applies it to your Shopify store through Shopify’s API.

No data is sent to any third party. The Extension contains no third-party analytics, advertising, tracking or telemetry code, and it loads no remote code.

What is stored locally

The following are stored in your browser via chrome.storage.local:

• your EcomXray API token,
• your optional custom storefront domain,
• your launcher button position.

The API token is held by the Extension’s background service worker and attached as an Authorization: Bearer header on requests to app.ecomos.dk. It is never exposed to web pages or content scripts, and never sent anywhere other than app.ecomos.dk.

How authentication tokens are used

The API token authenticates your requests to your own EcomOS account so the Extension can fetch and update your product data. You can disconnect at any time from the Extension popup (“Disconnect store”), which deletes the token from local storage. Regenerating the token in EcomOS immediately invalidates the previous one.

Personal data & browsing history

The Extension does not collect personally identifiable information about you or your store’s customers, and it does not collect, record or transmit your browsing history. It runs only on Shopify storefront product pages (and any custom storefront domain you explicitly authorize), and only to display analytics for the product you are viewing.

Selling and sharing of data

• We do not sell your data.
• We do not share your data with third parties.
• We do not use your data for advertising or to determine creditworthiness.
• Data is transmitted only between your browser and the EcomOS backend you authenticate to.

Data retention

• Local: the token, custom domain and UI preference remain in your browser until you disconnect/clear them or remove the Extension.
• Backend: product analytics and any edits are processed and stored by EcomOS under the EcomOS Terms and Privacy Policy; the Extension itself stores nothing server-side beyond what your authenticated EcomOS account already holds.

Permissions

• storage — to save your token, optional custom domain and launcher position locally.
• scripting — to inject the analytics panel on custom storefront domains you authorize.
• host access to app.ecomos.dk — to make authenticated API calls to your EcomOS backend.
• optional host access to a custom storefront domain — requested only when you enter a custom domain, and only for that domain. The Extension never requests access to all sites.

Children

EcomXray is a business tool and is not directed to children.

Changes to this policy

We may update this policy; the “Last updated” date above will change accordingly.

Contact

aMemory ApS — privacy: privacy@ecomos.dk · support: support@ecomos.dk.