AI Search Audit app
AI Search Audit privacy policy
What the app accesses, what it stores and how your data is deleted.
Last updated: October 28, 2026
AI Search Audit (the app) is provided by Listful Media ("we", "us"). This policy explains what the app accesses, stores and shares when a merchant installs it. You can contact us using the details at the end of this page.
What the app accesses
When you install the app, you grant read access to your product information. The app reads product titles, descriptions, images, image alt text, product types, search descriptions and barcodes to produce the audit. The app also loads your public storefront pages and your robots.txt file. It does not request or read customer data or order data.
What the app stores
The app stores one session record for each installed store. The record contains your store domain, the access token Shopify issues to the app and the access scope. Audit results are shown on screen and are not saved. Product information is read when you run an audit and is not retained afterwards.
Our server also keeps technical logs of requests to the app. These logs can include your store domain, your IP address and the short-lived session token Shopify attaches to each request. Logs are deleted automatically after 30 days.
How the data is used
The data is used only to provide the audit and to keep the app connected to your store. We do not sell data, use it for advertising or analytics, or share it with anyone other than the infrastructure providers listed below.
Infrastructure providers
The app runs on a server operated by OVHcloud in the United States. Traffic to the app passes through Cloudflare, which provides secure connections between Shopify and our server. These providers process data only to deliver the service on our behalf.
Retention and deletion
When you uninstall the app, we delete the session record for your store. When Shopify sends a shop redaction request, we delete any remaining records for that store. Because the app holds no customer data, customer data requests and customer redaction requests require no further action. Backups of the session records are kept for 14 days and then deleted.
Your rights
You can ask us at any time what we hold about your store, or ask us to delete it, by using the contact details at the end of this page. Uninstalling the app also removes your session record, as described above.
Contact
Questions about this policy can be sent to us by email.