Legal
Privacy Policy
Last updated: June 24, 2026
What Colter Is
Colter is operated by Agentic. It provides AI readiness scanning (Check), structured data generation (Fix), and agent traffic monitoring (Lens) for ecommerce stores. This policy covers data collected through the Colter Shopify app and the agenticcom.ai website.
Data We Collect
From Merchants (Shopify App)
- Store metadata: Shop domain, store name, currency, and locale used to configure the app and run scans.
- Product catalog data: Product titles, descriptions, images, variants, prices, and metafields used to assess structured data quality and generate fixes. This data is processed for scans and not retained as a merchant catalog mirror.
- Theme files: Template and asset contents read to determine what structured data already exists. Theme files are modified only when a merchant explicitly applies a fix.
- Order data: Order totals, timestamps, and line item counts used for Lens revenue attribution. Customer names, emails, addresses, and payment details are not stored.
- Checkout events: Checkout creation and update timestamps plus cart token used for Lens funnel analysis. No payment or customer PII is captured.
From Store Visitors (Lens Collection)
- HTTP request data: User-Agent string, request path, HTTP method, response status code, and response timing.
- Session data: A random session ID, page path, sanitized referrer, and timestamp that are not linked to a person. Referrer and path query strings and fragments are stripped before storage.
- Agent classification: Whether the visitor appears to be an AI agent based on User-Agent patterns and behavioral signals.
Lens collection does not store raw IP addresses, cookies, personal identifiers, or fingerprinting data. It is designed to classify traffic at the session level, not the individual shopper level.
From Website Visitors
- Email address: Provided at signup and used for authentication and account notifications.
- Store URL: Provided at signup or during a scan and used to run checks and configure monitoring.
- Website analytics: Cloudflare Web Analytics data with no cookies and no personal identifiers.
How We Use Data
- Run AI readiness scans and generate fix recommendations.
- Apply structured data fixes to merchant themes when explicitly requested.
- Monitor and classify agent traffic through Lens request metadata and beacon fallback events.
- Attribute orders and revenue to detected agent sessions when commerce events are connected.
- Authenticate merchants and manage billing.
- Improve app reliability and scanning quality using operational diagnostics.
- We do not use Shopify merchant data, customer data, or derived Shopify data to train AI or machine-learning systems without explicit written consent.
Data Storage and Security
Data is stored on Cloudflare infrastructure, including D1 database services and object storage where applicable. Shopify access tokens are encrypted at rest when encryption is enabled. All app-to-Shopify communication uses HTTPS. We do not sell, rent, or share merchant data for advertising.
Data Retention
- Check scan results: Retained for the merchant's plan history window: Free keeps a limited history, Pro keeps 30 days, and Agency keeps 90 days.
- Lens traffic data: Free Lens Lite keeps up to 30 days until 500 recorded agent visits, then shows a 24-hour active window. Pro keeps 30 days. Agency keeps 90 days.
- Account data: Retained until the merchant uninstalls the app or requests deletion, subject to legal retention requirements.
Data Deletion
When a merchant uninstalls the Colter app, we mark the installation as inactive, remove Colter theme modifications, deactivate Lens monitoring, and revoke Shopify-generated API keys. Stored data is retained according to the retention policy above and is fully deleted when we receive a Shopify shop/redact webhook.
To request immediate deletion, contact support@agenticcom.ai.
GDPR Compliance
Colter acknowledges Shopify's required GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Colter does not store customer PII from Shopify orders, so customer data request and redact webhooks are acknowledged with no customer record export or deletion payload beyond our stored merchant-side operational data.