Privacy policy

Last updated October 15, 2026

Storeoptic is a trade name (DBA) of Nulink International Inc. ("Storeoptic", "we", "us"), which operates this service and is responsible for your data. Storeoptic provides AI conversion checkups for online stores at storeoptic.com. This policy explains what we collect and why. Questions: hello@storeoptic.com.

What we collect

• Store links you submit and the public pages we read from them (homepage, a product page, product grid and policy pages), plus a phone screenshot rendered by Google PageSpeed Insights.
• Your report, so you can return to it with your link.
• Messages you send to the advisor chat, used to answer you.
• Contact details you give us (for example your email when you request a Full Report or join a waitlist).
• Growth Assistant chats (Growth plan): your messages, the assistant's replies and the facts you ask it to remember are stored so you can see your history. To answer, they are sent together with your website report data to our AI provider (Anthropic). You can start a new chat or delete remembered facts at any time; email us to delete your chat history.
• Customer Chat (Growth plan): when a business uses Customer Chat, we store the conversations its customers have with it (website chat, WhatsApp, Instagram and phone-call transcripts), contact details customers choose to share, and order lookups and refund requests. Messages are sent to our AI provider (Anthropic) to write replies and short summaries. We act on behalf of that business, which decides how the data is used; businesses should mention Customer Chat in their own privacy policy. Keys a business connects (Shopify, Stripe, Meta, Twilio, helpdesks) are stored encrypted and used only to answer its customers. We don't store calls as audio.
• Customers and payment links (Growth plan): from those conversations we build a customer list for the business: each person's name, contact details and channel IDs, a short AI-written summary of what they asked for, quotes, payments and next steps, plus any notes the business adds. When a business sends a payment link, the customer pays on Stripe's checkout page, on the business's own Stripe account; we store the amount, what it was for, whether it was paid and the payer's email Stripe returns, but never card details. The business can edit or delete any customer card at any time.
• Free checkup sign-in. To see the details of the 3 biggest problems in a free checkup, you sign in with Google or enter your email. We keep your email, your name (if you sign in with Google), which store or website you checked, its score and whether you later bought a Full Report. Google sign-in only shares your name, email address and profile picture with us; we don't store the picture or get any other access to your Google account. We use these details to email you your results and a small number of follow-up emails about your checkup and Storeoptic, as the sign-in box says. Every email has an unsubscribe link, and you can ask us to delete your details at any time.
• Waitlist. If you join the Storeoptic waitlist, we keep your email and the optional details you give (name, business, website, type of business and where your customers message you) to contact you when your spot opens. We only send product updates if you tick the box, and every email has an unsubscribe link.
• Storeoptic for Clinics. If you request early access, we keep your name, practice name, work email, practice type, practice system and size to contact you. The clinic demo runs entirely on made-up sample patients; it does not collect or store patient information, and what you click in the demo is saved only in your own browser. When you ask the demo to write or answer a message, only sample details (a made-up first name, visit type and time preference) and any reply you type while playing the patient are sent to our AI provider.
• Payment confirmation from our payment processor (Stripe), such as your email and whether a payment succeeded. We never see or store your card number. We use that email to send you your report link and, if you ask, to resend it. We don't send marketing emails without your permission (the free checkup sign-in box tells you we may follow up, and you can unsubscribe from any email).
• Basic technical data: we store a one-way hash of your IP address to prevent abuse and enforce daily limits.
• Ad measurement: see Advertising measurement below.

Advertising measurement

When we run ads on Reddit, our website loads the Reddit Pixel so we can tell whether those ads work. It tells Reddit when someone who saw or clicked our ad visits our site, starts or finishes a free checkup, unlocks their checkup details, joins the waitlist or buys a Full Report (with the price). Reddit uses cookies and device information to match these visits to its ads. We don't send Reddit your email, your name, the store or website you checked, or anything in your report.

The pixel doesn't load if your browser sends a Global Privacy Control or Do Not Track signal. You can also limit ad personalization in your Reddit account settings, or email us to opt out. Under some US state laws, using an ad pixel can count as "sharing" personal information for advertising; we treat the signals above as your opt-out of that sharing.

How we use it

To run checkups, show and deliver reports, answer questions, prevent abuse, process payments and improve the accuracy of Storeoptic. We do not sell personal information. The only sharing for advertising is the Reddit Pixel described above.

Service providers

We use Netlify (hosting and storage), Anthropic (AI analysis and chat), Google PageSpeed Insights, Chrome UX Report and Web Risk (speed data and safe-site checks), Browserless (loading pages in a real phone browser), Perplexity (live market research for business reports), Stripe (payments), Resend (sign-in and report emails), Supabase (database), DataForSEO (public Google search, Google Maps and review data about the websites and businesses our customers check), Hunter (finding and verifying business contacts for the Outreach Agent), Apollo (searching for business contacts, only through an Apollo account you connect) and Instantly (sending outreach emails from accounts you connect) and Google (Search Console and Analytics data, only through a Google account you connect, and Google Sign-In, if you choose it to see your free checkup details) and Reddit (ad measurement, see above). They process data on our behalf under their own terms and privacy policies. For Customer Chat we also use the services a business chooses to connect: Meta (WhatsApp, Instagram and Facebook Messenger), Twilio (phone calls), Shopify or Stripe (order lookups and refunds), and its helpdesk (Zendesk, Freshdesk, Gorgias, Help Scout, HubSpot or Intercom).

Google data (My website)

If you choose to connect your Google account on the My website page, we ask Google for read-only access to Google Search Console (webmasters.readonly) and Google Analytics (analytics.readonly), plus your Google account email address so you can see which account is connected. We cannot post, change or delete anything in your Google account.

We use this data only to show you your website's search and visitor numbers and to generate your monthly to-do list. To write that list, a summary of the numbers is processed by our AI provider (Anthropic) under terms that don't allow it to train models on that data. We store your Google refresh token encrypted, and keep your monthly reports in our database so you can compare months. We don't sell Google data, use it for advertising, or share it with anyone except the providers needed to run this feature, and no one at Storeoptic reads it unless you ask us for support or the law requires it.

Storeoptic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time on the My website page (we then revoke our access with Google and delete the token) or at myaccount.google.com/permissions. To have your stored Google reports deleted, email hello@storeoptic.com.

Retention

Outreach Agent. If you use the Outreach Agent, we store your account details, the campaigns you create, the business contacts the agent finds for you (name, job title, work email, company), the emails it drafts, and replies to your campaigns, so the agent can work and you can review results. Your Instantly API key is stored encrypted. For the business contacts in your campaigns, you decide who is contacted and we process their data on your behalf. Opt-out requests are kept on a do-not-contact list so they are never emailed again. Anyone who receives an email sent through the agent can ask us to delete their data at hello@storeoptic.com.

We keep each checkup's scores (not your page content or any personal details) in our database to build anonymous benchmarks, so reports can say how a site compares with similar sites. Benchmarks only ever show averages and percentages across many sites, never another site's name or results.

Reports and page snapshots are kept for up to 12 months so you can return to them, then deleted. You can ask us to delete your report or contact details at any time by emailing us with your report link.

Your choices and rights

Depending on where you live, you may have the right to access, correct or delete your personal information, or to object to certain uses. Email hello@storeoptic.com and we'll respond within 30 days.

WhatsApp, Instagram and Facebook data (Customer Chat)

When a business connects WhatsApp, Instagram or a Facebook Page to Customer Chat through Meta, we receive the messages its customers send to that account, the sender's WhatsApp number or Meta-scoped ID, the name on their WhatsApp profile, and the name and username on their Instagram or Facebook profile, plus access tokens that let us reply. We use this only to answer those messages on the business's behalf, show the conversations to the business, summarize them, and keep the business's customer list up to date. We never sell it, use it for advertising, or share it with anyone except our AI provider (Anthropic) to write replies. Tokens are stored encrypted.

Requests from government authorities

If a government agency, court or other public authority asks us for information about you or about a business's customers, we follow this process:

• We check that it's lawful. We review every request to confirm it is valid, legally binding and issued by an authority that has the power to make it. We don't answer informal requests.
• We push back when it's not. We challenge requests that are unlawful, unclear or broader than necessary, including in court where appropriate.
• We share as little as possible. If we must respond, we disclose only the minimum information the request legally requires.
• We keep a record. We document every request we receive, how we reviewed it and what, if anything, we provided.

Where the law allows, we tell the affected business or person before sharing their information. In the last 12 months we have received no such requests.

Deleting your data

Businesses: disconnect a channel any time under Customer Chat → Channels; we stop receiving its messages immediately and delete its access token. To delete your account and all conversations, email hello@storeoptic.com from your account email and we'll delete everything within 30 days. You can also remove Storeoptic's access in your Facebook or Instagram settings (Business Integrations / Apps and websites).

People who messaged a business: email hello@storeoptic.com with the business's name and your phone number or username, and we'll delete your conversations within 30 days, or contact the business directly.

Children

Storeoptic is a business tool and isn't directed to children under 16.

Changes

We'll update this page if our practices change and revise the date above.