Privacy Policy for Typo Tamer

Last updated: 29 October 2026

Who we are

Typo Tamer is operated by Linus Larson, Björkgatan 22, 753 24 Uppsala, Sverige (“we”). Contact: linus.larson@gmail.com.

What this policy covers

It explains what data the Typo Tamer app handles for merchants who install it, and for shoppers who use the search box it adds to a store.

Data we receive from the merchant’s store

• The store address (the .myshopify.com domain) and the access token Shopify gives us so the app can read the store’s data. The token is stored encrypted.
• The product catalog: product ID, title, handle, type, vendor, tags, main image link, lowest price, and whether the product is in stock (the stock count that Shopify reports for the product, used only to mark sold-out products). The app has permission to read products only. It does not read orders or customers, and the stock status is never sent to shoppers except as a “Sold out” label.
• Settings the merchant enters in the app, such as synonym pairs, and the subscription plan.

Data from shoppers

The search box sends the text a shopper types to our server through Shopify. We store that text, the number of results, the store and the time, so merchants can see popular searches and searches without results. Searches that look like personal data (they contain an @, a web address or seven or more digits) and searches made by known bots are not stored. Search history is deleted automatically after 90 days, and the merchant can clear it at any time in the app. We do not store names, email addresses, IP addresses or customer accounts, and the search box sets no cookies (it keeps only a short-lived technical flag in the browser session about whether our server is answering). Because shoppers can type anything, a search could in rare cases contain personal data; we treat it only as search text.

AI-generated synonyms

If a merchant on a plan that includes this feature chooses “Generate with AI”, we send product titles, product types and tags from that merchant’s catalog to our AI provider, Anthropic, which returns suggested alternative search words. No shopper searches, customer data or store credentials are sent. Only the merchant can start this, and the suggestions can be removed again at any time.

How we use the data

To run the search, keep the catalog up to date, show merchants their search statistics, handle billing through Shopify, and keep the service secure. We do not sell data and do not use it for advertising.

If our server is unavailable

The search box only uses Typo Tamer while our server answers. If it does not answer, the store’s own search is used and nothing is sent to us.

Who processes data for us

Shopify (the platform and billing), Render (render.com) (servers and storage), and Anthropic (only for the AI synonyms feature described above). We do not share data with anyone else except where the law requires it.

How long we keep it

When a merchant uninstalls the app, we immediately delete the access token. Shopify then sends us an erasure request about 48 hours later, and we delete all remaining store data: catalog, synonyms, search history and settings. Customer data requests and erasure requests that Shopify forwards are handled automatically; since we hold no customer-linked data, there is nothing to return or remove.

Your rights

If you are in the EU or UK you can ask for access, correction or deletion of personal data we hold, and you can complain to your data protection authority. Write to linus.larson@gmail.com. We answer within 30 days.

Security

Data is sent over encrypted connections, requests from Shopify are verified with signatures, access tokens are stored encrypted, and access to the server is limited to us.

Changes

We will update the date above when this policy changes, and tell merchants about material changes in the app or by email.