Privacy
The default Check My Shop assessment runs in your browser. Optional AI pre-fill sends only the shop description you type through ShopsInto to OpenAI when you choose Use AI to pre-fill, and you review suggestions before applying them. The optional AI-assisted Shop Report separately sends a limited result summary only when you choose Generate AI report. Assessment answers stay separate from analytics and the contact form. Privacy-focused analytics is optional and controlled through Privacy choices. This notice also explains Action Plan service information and what would change if payments are introduced.
01
ShopsInto is operated by Abaid Ullah as an independent sole proprietor in Pakistan. Public business and correspondence address: 201 Second Floor, Sadaat Apartment, Qamar Sialvi Rd, Cheema Colony, Gujrat, 50700, Pakistan. For privacy questions, requests, or concerns, email abaidmirza@shopsinto.com or call +92 332 8126654.
Open Who operates ShopsInto and privacy contact02
If you request a Smart Shop Action Plan, the dedicated intake form requires your name, email, country/market, shop/business type (a business name is optional), team size, number of locations, sales channels, approximate monthly sales/orders band, main problem, current workflow/process, current tools and setup, desired outcome, budget amount or range for improvements, and budget currency. Monthly volume includes a Not sure / prefer not to say option; the budget can be no budget or Not decided yet. Other sales channel and other budget currency details are required only when you select Other. Other constraints, previous attempts, and Check My Shop context are optional. Check My Shop answers are not attached automatically. ShopsInto uses what you submit to assess fit and completeness, email acceptance and payment instructions, and prepare and email the completed written plan. The intake is sent through our protected form endpoint and configured email transport to the ShopsInto service inbox. A separate confirmation email to you includes the generated request reference and next steps, without repeating your intake content. Intake content is not sent to analytics or the optional AI features. Share only what is needed for the agreed scope.
Open Action Plan enquiry and service information03
The form also transmits a hidden anti-spam field; it is checked but not included in service emails. The server checks request origin, fetch-site and content-type headers and body size, and uses the connection IP address for abuse prevention. A separate private form rate-limit ledger shared with contact and lead enquiries stores keyed IP hashes and request timestamps, without raw IP addresses or intake content. Timestamps count toward a rolling one-hour quota; expired entries are pruned on a later form request and may remain on disk until then. Accepted requests receive a generated reference containing a UTC date and random characters. It appears in the service inbox email, your separate confirmation email, and the response and receipt URL shown in your browser. Only the reference is added to that URL, not your form entries; the reference is removed from analytics URLs. The form code does not save intake content to a database, files, or browser storage; emailed intake and correspondence remain subject to the retention periods below. Hosting and email services may separately process technical delivery and request records under the security and server log retention below.
04
There is no online checkout on this site now. If a payment method is introduced, a selected third-party processor may collect and handle payment information under its own privacy terms. ShopsInto must not store full payment-card details. ShopsInto may receive limited purchase records such as payment status, amount, and transaction or order identifiers to confirm the order and provide support. The processor and final data flow will be identified before payments go live.
05
Contact enquiries are kept for up to 12 months after the last meaningful exchange. Action Plan requests that do not become paid orders are kept for up to 12 months after the request closes. For paid orders, customer and order records, including limited payment status, amount, and transaction references, are kept for up to 7 years after the transaction for accounting, tax, and dispute records. ShopsInto does not retain full payment-card details.
06
Working notes and material supplied for an Action Plan are deleted or de-identified within 90 days after delivery or cancellation unless needed for an open concern. The delivered plan and related service correspondence are kept for up to 3 years after delivery. Complaints and refund records are kept for up to 3 years after resolution, or up to 7 years where they form part of financial or legal records. Security and server request logs are normally kept for up to 90 days. These periods may be extended only where a legal duty, active dispute, or security investigation requires it; after that, information is deleted or de-identified. Backup copies expire on their normal rotation, and deletion requests are reviewed against these obligations.
07
Hosting, email, and any future payment processor may process information in different countries. The locations and safeguards depend on the services selected and will be confirmed before payment launch; no single processing country is promised here.
08
The assessment runs in your browser. The default assessment does not submit your assessment answers to ShopsInto. Your score, readiness stage, and Shop Blueprint are calculated locally without AI. Reloading the page or leaving it clears that in-memory assessment state. The optional AI pre-fill described below separately sends your typed description only when you choose Use AI to pre-fill. The optional AI report below sends only a limited result summary when you explicitly request it.
09
Only when you choose Use AI to pre-fill does the browser send the text you typed, with feature, prompt, schema, and consent version headers, through ShopsInto to OpenAI. Existing form answers, scores, contact information, and analytics preferences are not attached. Anything you include in that text will be sent, so leave out personal, customer, and sensitive information. ShopsInto supplies the allowed question catalogue and instructions. Suggestions must be reviewed and explicitly accepted with Use these suggestions before they fill the existing controls. Low-confidence or missing answers remain for you to answer. You can edit or reject suggestions. AI never calculates the score or decides priorities. Text and suggestions stay in page memory and are not saved to browser storage, analytics, or enquiries; Start Again, reloading, or leaving the page clears them. The endpoint processes content in memory without saving or logging it and marks responses not to be cached. OpenAI is asked not to store the response for later retrieval; this does not guarantee zero retention, including abuse monitoring, and processing may occur outside your country. The shared quota ledger and operational metrics below also apply without description or suggestion content.
10
Only when you choose Generate AI report does your browser send a limited result summary to the ShopsInto server, which validates it and forwards it to OpenAI to explain your existing Shop Blueprint. The summary contains your selected country and shop type, overall score band and area bands, readiness stage, primary action ID, next action IDs, deferred action IDs, applied readiness gate IDs, and summary, scoring, and recommendation catalogue version IDs. ShopsInto also supplies its own action definitions and report instructions. AI generation is optional; you can use the assessment and Shop Blueprint without it. The AI report does not change scoring, readiness, or recommendation order.
11
Apart from the selected country and shop type, raw assessment answers are not sent in the AI report request: individual scored answers, locations, sales channels, payment types, and stated time or business problems remain in your browser. Exact overall and area scores, planner metadata, names, email addresses, phone numbers, business names, and contact or Action Plan intake text are excluded. The summary and generated report are not sent to analytics or added to contact enquiries. If you allow analytics, limited AI report interaction events are recorded without summary, prompt, or report content.
12
The ShopsInto AI endpoint processes the summary and generated report in memory and does not save or log their content. The response is marked not to be cached; restarting, reloading, or leaving the page clears the report from the current page. ShopsInto requests that OpenAI not store the API response for later retrieval, but this does not guarantee zero retention: OpenAI may retain API data under its own data controls, including abuse monitoring, and may process it outside your country. A separate private rate ledger stores keyed hashes of IP addresses and request timestamps, without raw IP addresses, summaries, or reports. Timestamps count toward a rolling one-hour quota and expired entries are pruned on a later AI request; they can remain on disk until that request. Hosting infrastructure may separately keep technical request or error logs under the normal security and server log retention described above.
13
Each AI feature requires its own disclosed action before sending data. Choosing an AI report does not authorize future photo, file, or other AI features. Requests include feature, prompt, schema, and consent version IDs. The private shared quota ledger keeps keyed network hashes, optional keyed anonymous session hashes, feature IDs, credit weights, and timestamps for a rolling hour; expired entries are pruned on a later request. Private daily operational aggregates contain feature and model versions, attempts, successes and failures, token counts when available, elapsed time, weighted credits, and estimated cost when configured. They contain no visitor identifiers, summaries, prompts, reports, or contact information. Aggregates older than 30 days are pruned on a later attempt and may remain on disk until then. These operational records are separate from optional website analytics.
14
Information you deliberately enter in the general contact form or dedicated Action Plan intake form is transmitted to ShopsInto so we can respond to your enquiry or assess and provide the requested Action Plan as described above. Do not include passwords, financial or payment-card details, identity documents, or other sensitive personal information.
15
ShopsInto uses Umami Cloud in the European Union data region to measure page visits and a limited set of approved interaction events only after you choose Allow analytics. If you choose No thanks, Umami does not load. ShopsInto stores one first-party preference cookie named shopsinto_analytics for up to 6 months to remember that choice; the preference is not used as a visitor identifier. The analytics configuration does not set analytics cookies or use local storage or session storage for tracking, removes non-campaign query parameters and URL hashes before analytics transmission, permits standard UTM campaign tags, and respects browser Do Not Track. ShopsInto does not send contact details, Action Plan intake content, raw Check My Shop answers, exact assessment scores, Product Polish content, calculator inputs, finder answers, or payment-card information to analytics.
16
The hosting, analytics, and server infrastructure that serves this site may process limited technical request information needed to deliver pages, measure aggregate use, protect the service, and operate the contact and Action Plan intake endpoints.
17
For information submitted through either the general contact form or dedicated Action Plan intake form, use the contact form to ask what information you submitted, request correction or deletion, or ask about an order. ShopsInto will review the request and any applicable record-keeping obligations before responding.
Open Questions about your information