Terms of Service

Effective Date: April 23, 2026
Last Updated: April 23, 2026

1. Agreement to Terms

By installing, accessing, or using Customer Income Score ("the App"), you ("Merchant," "you") agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not install or use the App. The App is owned and operated by Customer Income Insights LLC ("Company," "we," "us").

2. Service Description

Customer Income Score is a Shopify application that provides address-based wealth segmentation for marketing purposes. The App:

Reads each customer's shipping address from your Shopify store.
Estimates the property value or typical rental cost associated with that address using Google LLC's Gemini service as a sub-processor (see Privacy Policy and DPA for details).
Applies a deterministic algorithm to the estimated property value, geographic cost-of-living multiplier, and housing type to assign each customer a wealth score on a 1–10 scale and a segment label (Budget, Middle, Upper-Middle, or Affluent). The scoring formula is fixed; the same inputs always produce the same output.
Tags customers in your Shopify store with their segment and score for use in your marketing tools.
Provides a dashboard with aggregate statistics, segment distributions, and marketing guidance.

All estimates are approximations derived from publicly available geographic and property data. They are directional marketing insights only — not verified facts about any individual, and not suitable for any decision that produces legal or similarly significant effects on a person.

3. Eligibility

You must have an active Shopify store and be authorized to install applications on that store. You must be at least 18 years old or the age of majority in your jurisdiction. By installing the App, you represent that you have the authority to bind the business entity that owns the Shopify store to these Terms.

4. Account and Access

The App authenticates via Shopify OAuth. You are responsible for maintaining the security of your Shopify account. We are not responsible for any unauthorized access to the App resulting from compromised Shopify credentials. We store your Shopify access token solely to operate the App on your behalf.

5. Data Usage and Compliance

                5.1 What We Collect
                Customer shipping addresses (street, city, state/province, postal code, country)
Customer IDs (Shopify numeric identifiers)
Customer tags already set in Shopify (read to avoid overwriting them)
Shop domain and Shopify OAuth access tokens (for Shopify API access)


                5.2 What We Generate and Store
                Estimated property value or rental cost for the address
Estimated household income range (computed from property value and local cost-of-living data)
Wealth score (1–10) — computed deterministically from the above
Segment classification (Budget, Middle, Upper-Middle, Affluent)
Confidence level indicating how reliably the address could be valued


                5.3 What We Do NOT Do
                We do NOT use your data to train machine-learning or generative models. Addresses sent to Google's Gemini service are used for inference only. Google's Gemini API terms prohibit training on data submitted via the API.
We do NOT sell, rent, or share customer data with third parties for their own purposes.
We do NOT aggregate data across merchants. Each merchant's data is isolated.
We do NOT access personal financial records such as bank accounts, tax returns, or credit reports.
We do NOT store customer names, email addresses, phone numbers, or order history.

            

6. Permitted and Prohibited Uses

Permitted Uses:

Marketing segmentation and campaign targeting
Product recommendations and personalization
Customer analytics and business intelligence
Ad spend allocation and audience optimization
Pricing strategy research

Prohibited Uses

You strictly agree NOT to use data generated by this App for:

Credit decisions, lending, or credit scoring of any kind
Employment screening, hiring, or termination decisions
Housing determinations, tenant screening, or rental decisions
Insurance underwriting or eligibility decisions
Any purpose regulated by the Fair Credit Reporting Act (FCRA)
Any purpose regulated by the Equal Credit Opportunity Act (ECOA)
Discriminatory practices of any kind, including but not limited to discrimination based on race, ethnicity, religion, national origin, gender, age, disability, or any protected class
Government surveillance or law enforcement purposes
Any decision that produces legal effects or similarly significant effects on individuals

IMPORTANT: Customer Income Score is NOT a consumer reporting agency, and its outputs are NOT consumer reports as defined by the FCRA. All estimates are for marketing segmentation purposes only. Outputs are approximations derived from public geographic and property data and are not verified facts about any individual.

7. Billing and Payment

The App offers two pricing plans, billed through Shopify's billing system:

Pay As You Go: Free to install. Per-enrichment charges apply on a tiered schedule starting at $0.15 per customer scored, with volume discounts. 10 free enrichments are included upon installation. Shopify applies a minimum charge of $0.50 per transaction; very small batches may need to be accumulated before processing.
Pro Plan: $10/month subscription plus $0.06 per auto-enriched customer. Includes automatic scoring of new customers as they arrive. No per-transaction minimum under this plan.

All charges are processed through Shopify's billing system and appear on your regular Shopify invoice. Failed enrichments (e.g., addresses that cannot be valued) and customers without shipping addresses are not billed. Refunds follow Shopify's standard billing policies.

Pro Plan cancellation: You may cancel your Pro subscription at any time from within the App. Cancellation is effective at the end of your current billing period — you retain Pro features (auto-enrich, flat $0.06/enrichment rate) until that date, then your account moves to Pay As You Go pricing. No prorated refunds are issued for the unused portion of the billing period.

8. Referral and Partner Programs

The App includes optional programs that allow merchants to refer other merchants and that allow approved third parties ("Partners") to earn commissions on referrals.

Shop-to-shop referrals: Each installed shop receives a unique referral code. If another shop enters your code within the referral window, both shops receive a credit of additional free enrichments. Referral codes do not transmit any identifying information about the referring or referred shop beyond the shop domain.
Partner commissions: Approved Partners receive a unique referral code that they may share with prospective merchants. When a merchant enters a Partner code, the merchant's subsequent paid enrichment activity generates a commission to the Partner at a published rate for a published period (currently 20% for 12 months). The merchant's identity (shop domain) and billing activity dates and amounts are disclosed to the Partner solely for commission accounting. Customer-level data is never disclosed to Partners.
Opting out: You may decline to enter any referral code. Entering a code is always optional. Once entered, referral codes remain associated with the shop for attribution purposes until uninstallation.

9. Intellectual Property

All rights, title, and interest in the App, including its software, algorithms, design, and documentation, are owned by Customer Income Insights LLC. You are granted a limited, non-exclusive, non-transferable license to use the App solely for its intended purpose while your subscription is active. The wealth scores and segment data generated for your customers are your data to use within the permitted use restrictions above.

10. Availability and Support

We strive to maintain high availability but do not guarantee uninterrupted service. The App depends on third-party services (Shopify, Google LLC, Railway) that may experience their own outages. We will make reasonable efforts to address issues promptly. For support inquiries, contact us at the email address listed below.

11. Disclaimer of Warranties

THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Property value and income range estimates are approximations based on publicly available geographic and property data. They may be inaccurate, incomplete, or outdated. We do not warrant or guarantee the accuracy, completeness, or reliability of any specific estimate. You acknowledge that individual results may vary significantly from actual household income or actual property value.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CUSTOMER INCOME INSIGHTS LLC, ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE APP, REGARDLESS OF THE CAUSE OF ACTION OR THE THEORY OF LIABILITY.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE APP SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100).

13. Indemnification

You agree to indemnify, defend, and hold harmless Customer Income Insights LLC from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the App; (b) your violation of these Terms; (c) your use of generated data in a manner inconsistent with Section 6; or (d) any claim by a third party related to your use of the App's outputs.

14. Termination

You may uninstall the App at any time through your Shopify admin. We may suspend or terminate your access if you violate these Terms, engage in prohibited uses, or if required by law. Upon termination, your access to the App ceases immediately, and your stored data will be deleted within 30 days in accordance with our Privacy Policy and Shopify's data protection requirements.

15. Modifications to Terms

We may update these Terms from time to time. Material changes will be communicated via the App dashboard or email. Continued use of the App after changes constitutes acceptance. If you do not agree with updated Terms, you should uninstall the App.

16. Governing Law and Disputes

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes arising under these Terms shall be resolved in the state or federal courts located in Delaware. You waive any objection to jurisdiction or venue in such courts.

17. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.

18. Entire Agreement

These Terms, together with the Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Customer Income Insights LLC regarding your use of the App, and supersede all prior agreements and understandings.

19. Contact

Customer Income Insights LLC
Email: customerincomeinsights@gmail.com

Privacy Policy

Effective Date: April 23, 2026
Last Updated: April 23, 2026

1. Introduction

Customer Income Insights LLC ("we," "us," "our") respects your privacy and the privacy of your customers. This Privacy Policy explains how we collect, use, store, and protect data when you use the Customer Income Score app ("the App"). This policy applies to merchants who install the App and to end-user customers whose shipping-address data is processed through the App.

2. Information We Collect

2.1 Merchant Information

Shop domain — Your myshopify.com domain, used to identify your store.
OAuth access token — Issued by Shopify during installation, used to access your store's customer data and billing APIs. Stored securely and encrypted at rest.
Billing records — Charge IDs and subscription status for payment processing through Shopify.
Referral code information — The referral code assigned to your shop and, if applicable, the code you entered to refer back to another merchant or partner (see Section 2.5).

2.2 Customer Information (processed on behalf of Merchants)

Customer IDs — Shopify numeric customer identifiers (pseudonymous; only meaningful within your shop).
Shipping addresses — Street address, city, state/province, postal code, and country. This is the primary input for property valuation and wealth segmentation.
Customer tags — Existing Shopify tags (read to avoid overwriting), and new tags written by the App (e.g., "affluent", "wealth-7").

We do not store customer email addresses, names, phone numbers, order history, or any other personal identifiers. The App reads customer records from Shopify in real time to locate the shipping address, but only the address and the resulting score are persisted in our database.

2.3 Information We Generate

Estimated property value or rental cost for the address
Estimated household income range
Wealth score (1–10), computed deterministically from the above
Segment classification (Budget, Middle, Upper-Middle, Affluent)
Confidence level indicating how reliably the address could be valued

2.4 How the Score Is Computed

The wealth score is computed by a deterministic algorithm, not by AI. Google LLC's Gemini service is used as a sub-processor to provide one narrow input: an estimated property value (or typical rental cost) for the shipping address. Our published scoring algorithm then combines that estimate with a cost-of-living multiplier for the state and a housing-type factor to produce a fixed, reproducible score. The same address always produces the same score.

This matters because it means the App does not make automated decisions about individuals using generative or machine-learning classification. The only step that is model-assisted is property-value estimation, which is equivalent in character to looking up an address on Zillow or Redfin and is itself derived from public property records.

2.5 Information We Do NOT Collect or Store

Customer email addresses — Read transiently from Shopify to locate a customer record, but never written to our database.
Customer names, phone numbers, or birthdates
Payment card numbers or financial account information
Social Security numbers or government-issued IDs
Order history, purchase amounts, or transaction data
Browsing behavior, cookies, or tracking pixels
Actual income, tax returns, or credit reports
Any data that crosses shop boundaries — all stored data is partitioned by shop domain

3. How We Use Information

We use collected information solely to provide and improve the segmentation service:

Purpose	Data Used	Legal Basis
Property-value estimation (Gemini inference)	Customer shipping addresses	Legitimate interest / Contract performance
Deterministic wealth scoring	Estimated property value, state, housing type	Contract performance
Customer tagging in Shopify	Customer IDs, generated scores	Contract performance
Dashboard display	Aggregated scores and addresses (city/state only)	Contract performance
Preflight count (Shopify Bulk Operations)	Customer IDs, tags, and shipping addresses	Contract performance
Billing and subscription management	Shop domain, charge records	Contract performance
Partner commission accrual	Shop domain, billing amounts and dates (no customer data)	Contract performance (voluntary, when merchant enters partner code)
Service reliability and debugging	Error logs (no customer PII in logs)	Legitimate interest

We do NOT sell, rent, or share customer data with any third party for their own marketing or commercial purposes.

We do NOT use customer data to train models. Data sent to Google LLC for property-value inference is subject to Google's API data usage policies, which prohibit training on inputs submitted via the Gemini API.

We do NOT aggregate data across merchants. Each merchant's data is fully isolated.

4. Shopify Bulk Operations (Preflight Count)

When you request an exact preflight count of customers to enrich, the App uses Shopify's Bulk Operations API. Shopify exports a list of your customers (IDs, tags, and default-address street-line-1 presence only) to a temporary file hosted by Shopify. We download that file, count customers meeting the scoring criteria, and store only the resulting count and a small breakdown (total customers, already scored, no address, scoreable). The exported file itself is not retained by us; it is retained by Shopify for the duration of their standard bulk-operation file lifecycle (approximately seven days at Shopify's discretion).

5. Information Sharing

We share data only with the following service providers, strictly for the purpose of operating the App:

Provider	Purpose	Data Shared	Location
Google LLC (Gemini API)	Property-value estimation for shipping addresses (inference only; no training)	Customer shipping addresses	USA
Railway Corp	Application and database hosting	All stored data (encrypted at rest)	USA
Shopify Inc.	Platform integration, billing, webhooks, and Bulk Operations file storage	OAuth tokens, customer tags, billing records, preflight export files	Canada / USA
Resend, Inc.	Transactional email delivery (magic-link admin auth, partner notifications)	Recipient email address and email body	USA
Approved Partners (optional)	Commission accounting when you voluntarily enter a Partner referral code	Shop domain, billing amounts and dates only. No customer data.	Varies

We do not share data with any other third parties. We will disclose information if required by law, regulation, or valid legal process (e.g., subpoena or court order).

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption in transit: All data is transmitted over HTTPS/TLS.
Encryption at rest: Database storage is encrypted.
Access controls: Access tokens and credentials are stored securely with restricted access.
Webhook verification: All incoming Shopify webhooks are verified via HMAC-SHA256 signatures.
Data isolation: Each merchant's data is logically isolated in our database.
Minimal data collection: We only collect and retain data necessary to provide the service.
Admin authentication: Administrative access uses single-use magic-link email tokens with short expiration; no shared static passwords.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention and Deletion

Active use: Data is retained while the App is installed and your account is active.
Uninstallation: When you uninstall the App, we receive Shopify's app/uninstalled webhook and initiate data deletion. All merchant data, enrichment records, and job history are deleted within 30 days.
Manual deletion: You may request deletion of all your data at any time by emailing us. We will process your request within 30 days.
Shopify GDPR webhooks: We respond to Shopify's mandatory compliance webhooks for customer data requests, customer data erasure, and shop data erasure.
Billing records: Anonymized billing records may be retained as required for tax and accounting purposes.
Partner commission records: Records of commissions accrued under the Partner Program are retained for the duration required by commission-payout obligations and applicable tax and accounting laws.

8. Your Rights

8.1 All Users

You have the right to:

Access the data we store about your customers (visible in the App dashboard).
Request deletion of all data by contacting us.
Uninstall the App at any time, triggering automatic data deletion.

8.2 GDPR (European Economic Area, UK, and Switzerland)

If you or your customers are located in the EEA, UK, or Switzerland, the following additional rights apply under the General Data Protection Regulation (GDPR):

Right of access: Request a copy of personal data we process.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of personal data ("right to be forgotten").
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to lodge a complaint: File a complaint with your local data protection authority.
Right regarding automated decisions (Article 22): The wealth score is not produced solely by automated means that result in legal or similarly significant effects. The score is computed by a deterministic published formula from an estimated property value. It is intended for marketing segmentation only; use for any decision with legal or similarly significant effects on individuals is expressly prohibited by our Terms of Service.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

8.3 CCPA (California, USA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to know: Request what personal information we collect, use, and disclose.
Right to delete: Request deletion of your personal information.
Right to opt out of sale: We do NOT sell personal information, so this right is automatically satisfied.
Right to non-discrimination: We will not discriminate against you for exercising your rights.

9. Children's Privacy

The App is designed for use by Shopify merchants operating businesses. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe we have inadvertently collected such data, please contact us immediately.

10. International Data Transfers

Our services are hosted in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the App, you consent to this transfer. For EEA/UK users, such transfers are governed by the Data Processing Agreement below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App dashboard or email. The "Last Updated" date at the top reflects the most recent revision. Continued use of the App after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact:
Customer Income Insights LLC
Email: customerincomeinsights@gmail.com

Data Processing Agreement (DPA)

Effective Date: April 23, 2026
Last Updated: April 23, 2026

This Data Processing Agreement ("DPA") governs the processing of Personal Data by Customer Income Insights LLC ("Processor," "we") on behalf of the Merchant ("Controller," "you") in connection with the Customer Income Score application. This DPA is incorporated into and forms part of the Terms of Service.

1. Definitions

"Personal Data" for purposes of this DPA means the categories of information actually processed through the App: customer shipping addresses, Shopify customer IDs, customer tags, and the derived wealth score, segment, and property-value estimates. It does not include names, email addresses, phone numbers, or order history, as those are not collected or stored by the App.
"Processing" means any operation performed on Personal Data, including collection, storage, analysis, modification, retrieval, and deletion.
"Data Protection Laws" means all applicable data protection and privacy laws, including the GDPR (EU) 2016/679, the UK GDPR, the CCPA (California Civil Code 1798.100 et seq.), and any amendments thereto.
"Sub-processor" means any third party engaged by us to process Personal Data on your behalf.

2. Scope and Purpose

We process Personal Data solely for the purpose of providing the Customer Income Score service as described in the Terms of Service. Specifically:

Receiving customer shipping addresses from your Shopify store.
Sending addresses to Google LLC's Gemini service for property-value estimation (inference only).
Applying our published deterministic scoring algorithm to produce a wealth score and segment.
Storing the resulting scores, segments, and related estimates in our database.
Writing customer tags back to your Shopify store.
Displaying results in the App dashboard.
Performing preflight counts via Shopify's Bulk Operations API when requested.

We will not process Personal Data for any purpose other than providing the service, unless required by applicable law.

3. Controller and Processor Roles

For the purposes of Data Protection Laws:

You (the Merchant) are the Controller of your customers' Personal Data. You determine the purposes and means of processing.
We (Customer Income Insights LLC) are the Processor, processing Personal Data on your behalf and in accordance with your instructions as expressed through your use of the App.

4. Obligations of the Processor

We shall:

Process Personal Data only on your documented instructions (i.e., as necessary to provide the App's functionality).
Ensure that persons authorized to process Personal Data have committed themselves to confidentiality.
Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (see Section 6).
Assist you in responding to data subject access requests and other rights requests.
Assist you in ensuring compliance with obligations regarding data breach notification.
Delete or return all Personal Data upon termination of the service, at your choice.
Make available to you all information necessary to demonstrate compliance with this DPA.

5. Sub-processors

You authorize the use of the following sub-processors:

Sub-processor	Service Provided	Data Processed	Location
Google LLC	Property-value estimation (Gemini API, inference only)	Customer shipping addresses	USA
Railway Corp	Application and database hosting	All stored data (encrypted at rest)	USA
Shopify Inc.	Platform integration, billing, and Bulk Operations file storage	OAuth tokens, customer tags, billing records, preflight export files	Canada / USA
Resend, Inc.	Transactional email delivery (magic-link auth, partner notifications)	Administrator and partner email addresses	USA

We will notify you before adding or replacing any sub-processor. If you object to a new sub-processor, you may terminate the service by uninstalling the App. We ensure that each sub-processor is bound by data protection obligations no less protective than those in this DPA.

6. Security Measures

We implement appropriate technical and organizational measures, including:

Encryption in transit: All communications use HTTPS/TLS 1.2+.
Encryption at rest: Database storage is encrypted using industry-standard encryption.
Access controls: Strict role-based access; API tokens and secrets stored securely.
Webhook integrity: All Shopify webhooks verified via HMAC-SHA256 signature validation.
Data isolation: Merchant data is logically isolated; no cross-merchant data access.
Admin authentication: Administrator access uses single-use magic-link email tokens, replacing shared static credentials.
Incident response: Procedures for identifying, reporting, and remediating security incidents.
Regular updates: Dependencies and infrastructure kept up to date with security patches.

7. Data Subject Rights

We will assist you in fulfilling your obligations to respond to requests from data subjects exercising their rights under Data Protection Laws, including rights of access, rectification, erasure, restriction, portability, and objection. We respond to Shopify's mandatory GDPR webhooks (customer data request, customer data erasure, and shop data erasure) to facilitate these rights programmatically.

8. Automated Decision-Making

The App does not perform automated decision-making that produces legal or similarly significant effects on data subjects within the meaning of GDPR Article 22. The wealth score is computed by a published deterministic formula from an estimated property value; it is not a machine-learning classification of individuals. The score is intended for marketing segmentation and is expressly prohibited by the Terms of Service from being used for any decision with legal or similarly significant effects on individuals (including credit, housing, employment, or insurance decisions).

9. Data Breach Notification

In the event of a Personal Data breach, we will:

Notify you without undue delay, and in any event within 72 hours of becoming aware of the breach.
Provide sufficient information to enable you to meet any obligations to report or inform data subjects of the breach.
Cooperate with you and take reasonable steps to assist in the investigation, mitigation, and remediation of each breach.

10. International Transfers

Personal Data is transferred to and processed in the United States. For transfers from the EEA/UK, we rely on:

Standard Contractual Clauses (SCCs) as adopted by the European Commission, which are incorporated into this DPA by reference.
The data importer's commitment to implement supplementary measures where necessary.

11. Duration and Termination

This DPA remains in effect for as long as we process Personal Data on your behalf. Upon termination of the service (e.g., App uninstallation), we will delete all Personal Data within 30 days, unless retention is required by applicable law. You may request confirmation of deletion.

12. Liability

The liability of each party under this DPA is subject to the limitations of liability set forth in the Terms of Service.

13. Contact

Customer Income Insights LLC
Data Protection Contact
Email: customerincomeinsights@gmail.com