Privacy Policy

1. Scope and our role

This policy applies to the GeeBird website, accounts and Shopify application services. The service is operated by GeeBird LLC, registered in Colorado, United States, with its registered principal office at 3229 Walnut St Suite 734, Boulder, CO 80301, United States. We determine why personal information is processed for account management, service operations and communications with you. For buyer data that merchants provide through the service, we generally act on the merchant’s instructions. Buyers should also read the privacy policy of the store where they shop.

2. Information we process

When you register, sign in or contact us, you may provide your email address, account details and communications. When you connect a Shopify store, we process store identifiers, products and content, theme files and settings according to the permissions granted and features you use. AI creation involves your prompts, conversations, reference images, screenshots and generated output. If you use voice input, we also process the audio you choose to record and submit, and its transcript.

If you enable reviews, wishlists or related features, information may also include buyer identifiers, contact details, reviews and photos, saved products and related activity. The actual scope depends on enabled features, data supplied by the merchant and Shopify permissions. Service operations also create session identifiers, request and error logs, usage records and subscription records. Do not include unnecessary personal information, passwords or payment credentials in creative prompts or images.

3. Sources and purposes

Information comes from you, the Shopify stores or sign-in services you authorize, and technical records created when you use the service. We process it to provide sign-in and store connections, generate and edit themes, operate enabled features, track usage allowances, manage subscriptions, provide support, troubleshoot problems and prevent abuse.

Where applicable law requires a legal basis, we rely on contract performance, legitimate interests, legal obligations or your consent, depending on the circumstances. You may withdraw consent for processing that relies on it. Withdrawal does not affect the lawfulness of earlier processing.

4. AI services and other third parties

When you run an AI task, relevant prompts, source code, images or preview screenshots may be sent to providers of inference or visual analysis. Theme generation and editing integrations include DeepSeek and Google Gemini; the provider used depends on the task and service configuration. If you choose to use voice input and submit a recording, the audio is sent to Google Gemini for transcription. The transcript is returned for you to check and use in subsequent prompts. You can revoke microphone permission in your browser, which affects future recording. Third-party processing may take place outside your country or region.

Shopify, authentication services and providers supporting hosting, communications and service operations may process information needed to deliver their services. We may also disclose information to meet legal requirements, protect legitimate rights or as part of a business transfer. We use Fly.io for hosting, with deployments in the United States and Japan, where related data may be processed. This does not mean AI, payment or other providers process data only in those two countries. The specific list and processing locations of other database and communications providers, and each AI provider’s data retention and model-training arrangements, remain to be verified. This policy does not promise that third parties retain no data or exclude it from training. Whether GeeBird itself uses user content for model training also remains subject to operational confirmation; this statement must not be treated as authorization for that use.

5. Payments and billing information

Subscriptions and credit purchases are handled through Pancake Checkout and the customer portal. We provide Pancake with your account email, internal account identifier and subscription or credit-purchase information needed for the transaction. We receive and store customer identifiers, subscription status, transaction and invoice identifiers, amounts and payment status to activate benefits, reconcile bills and process refunds. Pancake handles payment details entered on its pages; GeeBird’s current checkout flow does not directly collect full card numbers or security codes. Pancake may also process information for its own payment, security and legal obligations; see its privacy policy. The current integration is in test mode. Test records may still contain the email and account information you provide.

Pancake Privacy Policy →

6. Public content and merchant choices

Store pages, theme content, buyer reviews and images a merchant chooses to publish may be visible to store visitors. Make sure you have the necessary permissions before uploading or publishing, and avoid exposing sensitive personal information. Examples displayed on GeeBird’s website do not mean your projects are public by default.

7. Cookies and similar technologies

We use cookies for sign-in sessions, authentication flows and the current store selection. You can restrict or delete cookies in your browser, but doing so may prevent sign-in or store connections. Loading third-party images, fonts or other external content may send network requests and technical information to their providers. We also use local browser storage for light or dark appearance, sidebar state and cookie preferences. Cookie preferences are valid for 180 days and can be changed through ‘Cookie settings’ in the footer. You may need to choose again after clearing local storage. The current cookie controls cover third-party display images and fonts. They do not authorize sending creative content to AI services or enable analytics or marketing tracking. Whether other analytics or advertising technologies are deployed remains to be verified. See the Cookie Policy for details.

Read the Cookie Policy →

8. Retention, deletion and security

While your account is active, we retain the account, theme, project and conversation records needed to provide the service. Canceling a paid subscription does not close your account or, by itself, start project deletion. Under the Terms of Service, project data is retained for 30 days after account closure so you can request an export through support, then deleted or anonymized. Exceptions apply to legally required transaction records and records necessary for security or dispute resolution. Personal information deletion requests are handled as required by applicable law; the 30-day project retention period is not a blanket reason to delay them. Ordinary operational and error logs are retained for 90 days from creation, then deleted or anonymized. Rolling backups are retained for 30 days from creation and cleared on rotation. After production data is deleted, any remaining backups are used only for necessary disaster recovery, and recorded deletion requests are reapplied if a backup is restored. Billing and tax records are retained as required by law. Records kept longer for a security incident or dispute are limited to the scope and period necessary. Raw voice recordings are removed as soon as practicable after transcription or the request ends and are not kept as regular project files; transcripts are handled as conversation records. These periods apply to data controlled by GeeBird. They do not promise zero retention by third-party AI services, whose separate retention arrangements remain to be verified. Uninstalling the app, closing an account, deleting a project and canceling a subscription are different actions; none should be understood to make all data disappear immediately. Contact us for retention details or to request deletion.

We use security measures including authentication, access controls and session protection. However, no method of network transmission or storage can be guaranteed completely secure.

Read the Terms of Service →

9. Your privacy rights

Depending on applicable law and your circumstances, you may have rights to access, correct, delete or obtain a copy of personal information; restrict or object to processing; withdraw consent; and opt out of data sales, targeted advertising or certain automated decision-making as defined by law. Listing these rights does not mean GeeBird currently carries out all those activities.

Send requests to support@geebird.com with your account email, store domain and details of your request. Do not send passwords or full payment details. We may need to verify your identity or an authorized agent’s authority. For buyer data controlled by a merchant, we may help you contact that merchant. If you disagree with our decision, you may appeal at the same email address or complain to a regulator with jurisdiction. Specific rights, exceptions and deadlines are governed by applicable law.

10. Children

GeeBird is intended for merchants, sole proprietors and their authorized staff with legal capacity to contract. Account users must be at least 18 and meet the age of majority in their location. The service is not designed for children. If you believe a child has provided personal information to us, contact support so we can investigate and address it.

11. Updates and contact details

Version 1.0 of this policy takes effect on October 6, 2026. We may update it as our product, processing practices or legal requirements change. Updated policies will identify the version and effective date. We will provide additional notice or obtain consent for material changes where required. This update does not retroactively authorize previously unauthorized processing.

Operator: GeeBird LLC. Registered principal office: 3229 Walnut St Suite 734, Boulder, CO 80301, United States. Privacy contact: support@geebird.com.