Security
What we can touch, and what we cannot.
Alethia connects to your Shopify store. This page states exactly what that connection can do, what it cannot do, and what has to happen before anything changes.
Our classic black shirt. Great for any occasion. Slim fit.
After, drafted for approval120s two-ply cotton, 118 g/m². Non-iron finish, slim and classic fits, 14–18½ collar. Tested for twelve-hour wear.
Read first, write only on approval.
When you connect a store, Alethia takes read access to your catalogue. That is enough for everything we measure: products, variants, metafields, structured data and the public feed. Writing is separate and it is granted one action at a time. Every change we propose is a typed object with a plain description and a risk label, and it sits in a queue until you approve it. Nothing is published to your store because a model decided it should be. There is no autonomous publishing mode, and there is no plan to add one.
Before you approve
What each change looks like.
A system that can rewrite a merchant’s product copy unattended is a system whose worst day is very bad. So every change arrives fully explained.
The exact change
The field, the current value and the proposed value.
The measurement behind it
The measurement that produced it, and the question it is meant to affect.
A risk label
Copy changes, structured-data changes and anything touching price or availability are not the same risk and are not presented as if they were.
One click back
The previous value is retained, so an approved change can be put back.
What we never do
The lines we do not cross.
No unapproved writes
Nothing is published to your store without an explicit approval on that specific change.
No orders, customers or payments
We do not request those scopes, because nothing we do needs them.
No seeding
We never post on your behalf to forums, review platforms or communities, and we would advise against paying anyone who offers to.
No cross-customer use
One customer’s catalogue or results are never used to train anything used for another.
Data we hold
The record is the product.
Your catalogue as read from Shopify, the questions in your approved question set, the answers we sampled, the sources those answers cited, and the record of what was proposed, approved and published. Without it there is no before-and-after.
| Question | Answer |
|---|---|
| Where it is stored | To confirm: hosting provider and region |
| How long it is kept | To confirm: retention period after an account closes |
| Subprocessors | To confirm: the list, and what each one receives |
| Certifications | To confirm: what exists, or plainly that none do yet |
Those four are facts about our infrastructure rather than about the product, and they are left blank rather than approximated. If you need them answered before you can proceed, ask and we will put them in writing.
Uninstall revokes access at once
Uninstalling the app from your Shopify admin revokes our access immediately. Published changes stay in your store, because they are your store’s content, and the record of what was changed is exported to you on request.
Found a security issue?
Write to ishaan@usealethia.com with enough detail to reproduce it. We will confirm receipt and tell you what we are doing about it. Please do not test against another merchant’s store.
Questions
Questions we are asked.
Can Alethia change my store without asking?
No. Read access is taken when you connect. Write access is granted one action at a time, and every proposed change waits in a queue until you approve that specific change. There is no autonomous publishing mode and there is no plan to add one.
What Shopify permissions does Alethia request?
Catalogue read access, meaning products, variants, metafields and the public feed, and write access only to the fields a change touches. We do not request orders, customers or payment scopes, because nothing we do needs them.
Can I undo a change Alethia published?
Yes. The previous value of every field is retained before a change is written, so an approved change can be put back.
What happens to my data if I uninstall?
Uninstalling from your Shopify admin revokes access immediately. Changes already published stay in your store, and the record of what was measured and changed is exported to you on request.
Do you use my catalogue to train models?
No. One customer’s catalogue, questions or results are never used for another customer, and we do not train models on them.
No commitment
See how AI is selling your products.
Get your free Alethia AI report and see where your brand stands across the AI platforms your customers are already using.
