Aimé

Privacy Policy

Global-baseline launch draft for Aimé’s US and Israel proof of concept.

Launch draft — pending technology/privacy counsel approval. Version: 2026-08-23-draft. This draft is not represented as legal advice or counsel approval.

Who operates Aimé

Aimé is currently operated by Ori Kreimer under Kreimercom, subject to confirmation by Israeli legal and tax advisers. Contact privacy@aimecommerce.app for privacy matters.

Data Aimé processes

  • Account, workspace, authentication, support, security, billing-status, and legal-acceptance records.
  • Merchant-provided brand materials, product catalog data, media, workflow settings, approvals, and generated outputs.
  • Encrypted connection credentials and identifiers required to operate Shopify, Meta, Instagram, and other merchant-authorized integrations.
  • For Shopify v1, product data and up to the most recent 60 days of order-level commerce data needed for merchant analytics. Aimé does not request or store Shopify customer names, email addresses, phone numbers, or postal addresses.

Purposes

Aimé processes data to authenticate users, operate merchant-requested integrations, create draft products and media, calculate merchant analytics, schedule approved work, prevent abuse, secure the service, provide support, and administer subscriptions. Shopify data is limited to store management and analytics.

AI providers

Merchant content is sent to approved AI or media-processing providers only when needed for a requested feature. Shopify customer and order data is never used for cross-merchant AI training. See the AI data-use policy.

Sharing and international transfers

Aimé uses service providers listed in the subprocessor register. Data may be processed outside the merchant’s country using the contractual and technical safeguards identified in the final counsel-approved DPA. Aimé does not sell personal data.

Retention

  • Shopify tokens exist only while connected and are revoked or deleted on disconnect or uninstall.
  • Raw Shopify API responses are processed transiently and are not retained.
  • Order-linked identifiers are retained for no more than 90 days; irreversibly aggregated product metrics may remain for the workspace lifetime.
  • Rights-request exports expire after 24 hours. Deleted-account operational data is targeted for purge within 30 days, subject to documented legal and security exceptions.

Choices and rights

Merchants can disconnect integrations, export workspace data, delete an account, or submit an access, correction, deletion, or objection request. Instructions are on the data deletion page. Applicable rights depend on location and will be finalized by counsel.