Privacy Policy

Last updated: 28 August 2026

MyShopiShop is a social shopping platform operated by Convomesh (“Convomesh”, “we”, “us”), based in Australia. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to myshopishop.com, every shop hosted on it, and the MyShopiShop app.

The short version: we collect what we need to run a social shopping service — your account, what you share, what you buy, and how you use the platform. We use it to make the service work and to personalise what you see. We do not sell your personal information, and we never show your date of birth, your purchases, or your private messages to other users.

What we collect

Account information

• Email address, name, and profile photo if you add one.
• Date of birth — asked once, at sign-up. We use it only to confirm you are old enough to use MyShopiShop and to apply age-appropriate settings. It is never shown on your profile or to other users.
• If you sign in with Google or Apple, we receive your name and email address from them. We never see your password for those services. Apple lets you hide your email address; that works here.

Content you create

• Video takes, asks, votes, comments, and reactions you post, and the shop page you curate — including your shop name and avatar. This content is public by design: MyShopiShop is a social platform, and other people can see it, share it, and find it.
• The people you shop for and the goals you set (for example, a person’s name, relationship to you, sizes, and preferences you enter). These drive your recommendations and are private to your account unless you publish a shop built on them.

Shopping and payment information

• Your cart, orders, order history, shipping details, and country.
• Payments are processed by Stripe. We never see or store your full card number — Stripe handles it and tells us the payment succeeded. Stripe’s own privacy policy applies to the payment itself.
• If you earn commissions as a creator, Stripe also handles your payout account, which may require identity information collected by Stripe directly.

How you use the platform

• What you view, tap, save, skip, and how long you watch — this is what makes your feed yours instead of everyone’s.
• Technical basics: IP address, approximate country (from your IP address or your device’s locale), device and browser type, and crash or error reports.
• Messages you exchange with the shopping assistant. These are processed to answer you and to improve your recommendations (see the AI section below).

How we use it

• To run the service — accounts, feeds, shops, carts, orders, payouts, and support.
• To personalise — your feed, search results, and recommendations are ranked using what you have shown us about your taste and the people you shop for.
• To communicate — service emails (orders, sign-in links, security) always; marketing emails only with your consent, and every one carries an unsubscribe link that works.
• To keep the platform safe — fraud prevention, abuse detection, and enforcing our Terms.
• To meet legal obligations — tax, consumer, and record-keeping law.

AI on MyShopiShop

Personalisation and the shopping assistant are powered by artificial intelligence models, including models provided by Google. Your messages to the assistant, your preferences, and your activity are processed by these models to generate answers and recommendations. Model providers act as our processors: they process this data to provide the service to us, not to advertise to you. We do not use your private messages to train publicly available AI models.

Who we share it with

• Merchants you buy from. When you place an order with a brand on MyShopiShop, that brand receives what it needs to fulfil it: your name, shipping address, email, and the order itself. The brand is a separate business and handles that information under its own privacy policy.
• Service providers who run infrastructure for us: Google Cloud and Firebase (hosting, authentication, storage, analytics), Stripe (payments and payouts), SendGrid (email delivery), and Shopify (for brands whose stores connect through it). They process data on our instructions.
• Affiliate partners. Some products link out to external retailers through affiliate networks. When you click out, the destination site and network know you arrived from us; their policies apply from that point.
• Other users — only the content that is public by design (your takes, votes, comments, shop, name, and avatar). Never your email, date of birth, purchases, or messages.
• When the law requires it, or to protect our users, our platform, or our rights — and if Convomesh is ever acquired or restructured, as part of that transaction, under this policy’s protections.

We do not sell personal information, and we do not share it with data brokers.

Where your data lives

Our infrastructure runs on Google Cloud in the United States. That means your information is transferred to and stored in the US regardless of where you live, protected by the safeguards in this policy and our agreements with our providers. Payment data stays with Stripe in its own infrastructure.

Cookies

We use cookies for the things the service cannot work without: keeping you signed in, remembering your country and your cart, and security. We do not run third-party advertising cookies. Your browser can block or clear cookies; signed-in features stop working without them.

How long we keep it

For as long as your account exists, so the service keeps working for you. Order records are kept as long as tax and consumer law requires. If you delete your account, we delete or de-identify your personal information within a reasonable period, except what we must keep by law and content you posted that others have interacted with, which may persist in de-identified or attributed-to-a-deleted-account form.

Your choices and rights

• Access and correction — see and edit your profile and preferences in the app, or ask us for a copy of your personal information.
• Deletion — delete your account yourself, in the app, from your account menu. It is not hidden behind a support ticket.
• Marketing — unsubscribe from any marketing email with one click, without losing service emails.
• Your content — delete any take, comment, or shop item you posted, at any time.

If you are in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply, and you can complain to us first and to the OAIC (oaic.gov.au) if we get it wrong. If you are in the UK or the European Economic Area, you additionally have the rights the UK and EU GDPR give you — access, rectification, erasure, restriction, portability, and objection — and the legal bases we rely on are performance of our contract with you, consent (for marketing), and our legitimate interest in running and protecting the service. If you are in a US state with a consumer privacy law, note that we do not sell or “share” personal information as those laws define it.

Children

MyShopiShop is for people 16 and older. We ask for your date of birth at sign-up and refuse accounts below 16. If we learn we have collected personal information from someone under 16, we delete it. If you believe an underage person is using the platform, contact us.

Security

We protect your information with encryption in transit, access controls, and infrastructure run by providers with strong security practice (Google Cloud, Stripe). No platform can promise perfect security; if a breach ever puts you at risk, we will tell you and the regulator as the law requires.

Changes

When we change this policy we will update the date at the top, and for significant changes we will tell you in the app or by email before they take effect.

Contact

Privacy questions or requests: support@myshopishop.com. We answer requests about your own information free of charge, within a reasonable time. See Support for anything else.