Privacy Policy

This Privacy Policy explains how Space Cadet d.o.o. (“we”, “us”, “our”), the operator of the Cuebase application for Shopify (“Cuebase”, the “App”), collects, uses, discloses, retains and protects personal data. It applies to the merchants who install the App and to the visitors and customers of those merchants’ online stores whose data the App processes.

Cuebase helps merchants optimize their catalog for AI shopping assistants, measure AI-referred traffic, and track their visibility inside AI answers.

1. Who we are (data controller and processor)

Space Cadet d.o.o., a limited liability company (d.o.o.) established in Croatia, represented by its founder Dino Sakoman, is responsible for the App:

Space Cadet d.o.o.
Ulica Ivana Šibla 17, 10000 Zagreb, Hrvatska (Croatia)
Registered at the Commercial Court in Zagreb · MBS: 081627179
OIB: 36241253193
Email: hello@cuebase.app · Full legal disclosure: Impressum

• For personal data relating to a merchant’s own account and use of the App (e.g. the store domain and account contact), we act as a data controller.
• For personal data relating to a merchant’s store visitors and customers that the App processes on the merchant’s behalf, we act as a data processor, and the merchant is the controller. Our processing in that role is governed by Shopify’s Data Processing Addendum and applicable data protection law.

2. Data we process

• Merchant & store data (via the Shopify Admin API) — store domain, and product data such as titles, descriptions, images and alt text, product type, vendor, barcodes, prices and metafields. Only the fields needed to score readiness and generate improvements are processed.
• Order data (via the orders/create webhook) — order identifier, total, currency and the referring source. Used to attribute sales to AI channels. We do not collect or store customer names, email addresses, postal addresses, or payment details.
• Storefront analytics (via our Shopify Web Pixel) — an anonymous client identifier, the referring URL, and which page or product was viewed. Used to classify AI-referred traffic (e.g. ChatGPT, Perplexity, Gemini, Google AI). This data is not linked by us to a named individual.
• Share of Voice data — the tracked prompts you configure, your competitor list, and the AI-answer results we measure. This contains no store-visitor personal data.

3. How we use data, and our legal bases

We process personal data to:

• provide, operate and secure the App and its features;
• score catalog readiness and generate suggested improvements;
• measure AI-referred traffic, conversion and share of voice;
• respond to support requests and comply with legal obligations.

Where the GDPR applies, our legal bases are: performance of a contract (Art. 6(1)(b)) to provide the App you install; our legitimate interests (Art. 6(1)(f)) in operating, securing and improving the App; compliance with a legal obligation (Art. 6(1)(c)), including honoring data-deletion requests; and, where required, consent (Art. 6(1)(a)) — for example, the storefront pixel operates within the merchant’s own cookie/consent framework.

4. Service providers (sub-processors) and international transfers

We share the minimum data necessary with the following providers to run the App:

• Anthropic (accessed via OpenRouter) — product content is sent to generate readiness improvements and seed tracked queries.
• DataForSEO — brand, competitor and query terms are sent to measure Share of Voice across AI engines.
• Neon — hosts our application database.
• Vercel — hosts the application.

Some of these providers may process data outside the European Economic Area, including in the United States. Where that occurs, transfers are safeguarded by appropriate measures such as the European Commission’s Standard Contractual Clauses. We do not sell personal data or use it for cross-context behavioral advertising, and we do not use your store or product data to train AI models.

5. Data retention and deletion

• We retain merchant and store data for as long as the App is installed and as needed to provide the service.
• When you uninstall the App, Shopify sends a shop/redact request (typically 48 hours later). On receipt we permanently delete all data associated with your shop.
• We honor Shopify’s customers/redact and customers/data_request requests. Because we store no customer-identifying profiles, redaction removes any order-level records tied to the identified orders.
• You may request deletion of your data at any time by emailing us at the address below.

6. Your rights

Subject to applicable law (including the GDPR and, for California residents, the CCPA/CPRA), you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior processing.

To exercise these rights, contact us at hello@cuebase.app, or use Shopify’s data-request flow. Where we act as a processor for a merchant, we will direct store-visitor requests to that merchant. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Croatian Personal Data Protection Agency (AZOP, Agencija za zaštitu osobnih podataka) — in particular in the EU/EEA Member State where you reside or where an alleged infringement occurred.

7. Security

Data is transmitted over encrypted connections (HTTPS), and access tokens and credentials are stored securely. Access to production data is limited to what is required to operate and support the App. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect personal data.

8. Cookies and similar technologies

The App’s storefront Web Pixel uses an anonymous client identifier to attribute AI-referred sessions to orders. It does not identify individuals by name and is not used for cross-site advertising. The pixel operates within the merchant’s own storefront consent management.

9. Children

The App is a business tool for merchants and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the App evolves or as required by law. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to merchants.

11. Contact

Space Cadet d.o.o. — attn. Dino Sakoman
Questions, privacy requests or data-deletion requests: hello@cuebase.app