Terms of Service

Effective Date: April 10, 2026
Last Updated: February 24, 2026

1. Agreement to Terms

By installing, accessing, or using Customer Income Score ("the App"), you ("Merchant," "you") agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not install or use the App. The App is owned and operated by Customer Income Insights LLC ("Company," "we," "us").

2. Service Description

Customer Income Score is a Shopify application that provides AI-powered household wealth estimation for your customers based on their shipping addresses. The App:

Analyzes customer shipping addresses using Google Gemini AI to estimate property values, neighborhood demographics, and likely household income ranges.
Assigns each customer a wealth score on a 1–10 scale and a segment label (Budget, Middle, Upper-Middle, or Affluent).
Automatically tags customers in your Shopify store with their segment and score for use in marketing tools.
Provides a dashboard with aggregate statistics, score distributions, and marketing guidance.

All estimates are approximations derived from publicly available geographic and property data. They are not verified financial data and should be treated as directional marketing insights only.

3. Eligibility

You must have an active Shopify store and be authorized to install applications on that store. You must be at least 18 years old or the age of majority in your jurisdiction. By installing the App, you represent that you have the authority to bind the business entity that owns the Shopify store to these Terms.

4. Account and Access

The App authenticates via Shopify OAuth. You are responsible for maintaining the security of your Shopify account. We are not responsible for any unauthorized access to the App resulting from compromised Shopify credentials. We store your Shopify access token solely to operate the App on your behalf.

5. Data Usage and Compliance

                5.1 What We Collect
                Customer shipping addresses (street, city, state, zip code, country)
Customer IDs and shipping addresses (for wealth estimation and tagging)
Shop domain and OAuth access tokens (for Shopify API access)


                5.2 What We Generate and Store
                Estimated income range (min/max)
Wealth score (1–10)
Segment classification (Budget, Middle, Upper-Middle, Affluent)
Confidence level and reasoning summary
Estimated home value range


                5.3 What We Do NOT Do
                We do NOT use your data to train AI models. Customer data is used for inference only.
We do NOT sell, rent, or share customer data with third parties for their own purposes.
We do NOT aggregate data across merchants. Each merchant's data is isolated.
We do NOT access personal financial records such as bank accounts, tax returns, or credit reports.

            

6. Permitted and Prohibited Uses

Permitted Uses:

Marketing segmentation and campaign targeting
Product recommendations and personalization
Customer analytics and business intelligence
Ad spend allocation and audience optimization
Pricing strategy research

Prohibited Uses

You strictly agree NOT to use data generated by this App for:

Credit decisions, lending, or credit scoring of any kind
Employment screening, hiring, or termination decisions
Housing determinations, tenant screening, or rental decisions
Insurance underwriting or eligibility decisions
Any purpose regulated by the Fair Credit Reporting Act (FCRA)
Any purpose regulated by the Equal Credit Opportunity Act (ECOA)
Discriminatory practices of any kind, including but not limited to discrimination based on race, ethnicity, religion, national origin, gender, age, disability, or any protected class
Government surveillance or law enforcement purposes
Any decision that produces legal effects or similarly significant effects on individuals

IMPORTANT: Customer Income Score is NOT a consumer reporting agency, and its outputs are NOT consumer reports as defined by the FCRA. All estimates are for marketing segmentation purposes only. They are AI-generated approximations, not verified facts about any individual.

7. Billing and Payment

The App offers two pricing plans, billed through Shopify's billing system:

Pay As You Go: Free to install. Per-enrichment charges apply starting at $0.15 per customer scored, with volume discounts. 10 free enrichments are included upon installation.
Pro Plan: $10/month subscription plus $0.06 per auto-enriched customer. Includes automatic scoring of new customers as they arrive.

All charges are processed through Shopify's billing system and appear on your regular Shopify invoice. Failed or skipped enrichments (e.g., customers without valid addresses) are not charged. Refunds follow Shopify's standard billing policies.

Pro Plan cancellation: You may cancel your Pro subscription at any time from within the App. Cancellation is effective at the end of your current billing period — you retain Pro features (auto-enrich, flat $0.06/enrichment rate) until that date, then your account moves to Pay As You Go pricing. No prorated refunds are issued for the unused portion of the billing period.

8. Intellectual Property

All rights, title, and interest in the App, including its software, algorithms, design, and documentation, are owned by Customer Income Insights LLC. You are granted a limited, non-exclusive, non-transferable license to use the App solely for its intended purpose while your subscription is active. The wealth scores and segment data generated for your customers are your data to use within the permitted use restrictions above.

9. Availability and Support

We strive to maintain high availability but do not guarantee uninterrupted service. The App depends on third-party services (Shopify, Google AI, Railway) that may experience their own outages. We will make reasonable efforts to address issues promptly. For support inquiries, contact us at the email address listed below.

10. Disclaimer of Warranties

THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Income and wealth estimates are approximations based on publicly available geographic and property data processed by AI. They may be inaccurate, incomplete, or outdated. We do not warrant or guarantee the accuracy, completeness, or reliability of any specific estimate. You acknowledge that individual results may vary significantly from actual household income.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CUSTOMER INCOME INSIGHTS LLC, ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE APP, REGARDLESS OF THE CAUSE OF ACTION OR THE THEORY OF LIABILITY.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE APP SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100).

12. Indemnification

You agree to indemnify, defend, and hold harmless Customer Income Insights LLC from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the App; (b) your violation of these Terms; (c) your use of generated data in a manner inconsistent with Section 6; or (d) any claim by a third party related to your use of the App's outputs.

13. Termination

You may uninstall the App at any time through your Shopify admin. We may suspend or terminate your access if you violate these Terms, engage in prohibited uses, or if required by law. Upon termination, your access to the App ceases immediately, and your stored data will be deleted within 30 days in accordance with our Privacy Policy and Shopify's data protection requirements.

14. Modifications to Terms

We may update these Terms from time to time. Material changes will be communicated via the App dashboard or email. Continued use of the App after changes constitutes acceptance. If you do not agree with updated Terms, you should uninstall the App.

15. Governing Law and Disputes

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes arising under these Terms shall be resolved in the state or federal courts located in Delaware. You waive any objection to jurisdiction or venue in such courts.

16. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.

17. Entire Agreement

These Terms, together with the Privacy Policy and Data Processing Agreement, constitute the entire agreement between you and Customer Income Insights LLC regarding your use of the App, and supersede all prior agreements and understandings.

18. Contact

Customer Income Insights LLC
Email: [email protected]

Privacy Policy

Effective Date: April 10, 2026
Last Updated: February 24, 2026

1. Introduction

Customer Income Insights LLC ("we," "us," "our") respects your privacy and the privacy of your customers. This Privacy Policy explains how we collect, use, store, and protect data when you use the Customer Income Score app ("the App"). This policy applies to merchants who install the App and to end-user customers whose data is processed through the App.

2. Information We Collect

2.1 Merchant Information

Shop domain — Your myshopify.com domain, used to identify your store.
OAuth access token — Issued by Shopify during installation, used to access your store's customer data and billing APIs. Stored securely and encrypted at rest.
Billing records — Charge IDs and subscription status for payment processing through Shopify.

2.2 Customer Information (processed on behalf of Merchants)

Customer IDs — Shopify numeric customer identifiers (pseudonymous; only meaningful within your shop).
Shipping addresses — Street address, city, state/province, zip/postal code, and country. This is the primary input for wealth estimation.
Customer tags — Existing Shopify tags (read to avoid overwriting), and new tags written by the App (e.g., "affluent", "wealth-7").

We do not store customer email addresses, names, phone numbers, or any other personal identifiers. The App reads customer records from Shopify in real time to extract the shipping address, but only the address (and the resulting derived score) is persisted in our database. Email addresses are never written to our storage.

2.3 Information We Generate

Estimated household income range
Wealth score (1–10)
Segment classification (Budget, Middle, Upper-Middle, Affluent)
Confidence level and AI reasoning summary
Estimated home value range

2.4 Information We Do NOT Collect or Store

Customer email addresses — Read transiently from Shopify to identify a customer record, but never written to our database.
Customer names, phone numbers, or birthdates
Payment card numbers or financial account information
Social Security numbers or government-issued IDs
Order history, purchase amounts, or transaction data
Browsing behavior, cookies, or tracking pixels
Actual income, tax returns, or credit reports
Any data that crosses shop boundaries — all stored data is partitioned by shop domain

3. How We Use Information

We use collected information solely to provide and improve the income estimation service:

Purpose	Data Used	Legal Basis
AI-powered wealth estimation	Customer shipping addresses	Legitimate interest / Contract performance
Customer tagging in Shopify	Customer IDs, generated scores	Contract performance
Dashboard display	Aggregated scores and addresses (city/state only)	Contract performance
Billing and subscription management	Shop domain, charge records	Contract performance
Service reliability and debugging	Error logs (no customer PII in logs)	Legitimate interest

We do NOT sell, rent, or share customer data with any third party for their own marketing or commercial purposes.

We do NOT use customer data to train AI models. Data sent to Google Gemini AI is used for inference only and is subject to Google's API data usage policies, which prohibit training on API inputs.

We do NOT aggregate data across merchants. Each merchant's data is fully isolated.

4. Information Sharing

We share data only with the following service providers, strictly for the purpose of operating the App:

Provider	Purpose	Data Shared	Location
Google LLC (Gemini AI)	Address analysis and wealth estimation	Customer shipping addresses (inference only, not used for model training)	USA
Railway Corp	Application and database hosting	All stored data (encrypted at rest)	USA
Shopify Inc.	Platform integration, billing, and webhooks	OAuth tokens, customer tags, billing records	Canada / USA

We do not share data with any other third parties. We will disclose information if required by law, regulation, or valid legal process (e.g., subpoena or court order).

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption in transit: All data is transmitted over HTTPS/TLS.
Encryption at rest: Database storage is encrypted.
Access controls: Access tokens and credentials are stored securely with restricted access.
Webhook verification: All incoming Shopify webhooks are verified via HMAC-SHA256 signatures.
Data isolation: Each merchant's data is logically isolated in our database.
Minimal data collection: We only collect and retain data necessary to provide the service.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention and Deletion

Active use: Data is retained while the App is installed and your account is active.
Uninstallation: When you uninstall the App, we receive Shopify's app/uninstalled webhook and initiate data deletion. All merchant data, enrichment records, and job history are deleted within 30 days.
Manual deletion: You may request deletion of all your data at any time by emailing us. We will process your request within 30 days.
Shopify GDPR webhooks: We respond to Shopify's mandatory compliance webhooks for customer data requests, customer data erasure, and shop data erasure.
Billing records: Anonymized billing records may be retained as required for tax and accounting purposes.

7. Your Rights

7.1 All Users

You have the right to:

Access the data we store about your customers (visible in the App dashboard).
Request deletion of all data by contacting us.
Uninstall the App at any time, triggering automatic data deletion.

7.2 GDPR (European Economic Area, UK, and Switzerland)

If you or your customers are located in the EEA, UK, or Switzerland, the following additional rights apply under the General Data Protection Regulation (GDPR):

Right of access: Request a copy of personal data we process.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of personal data ("right to be forgotten").
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to lodge a complaint: File a complaint with your local data protection authority.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

7.3 CCPA (California, USA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to know: Request what personal information we collect, use, and disclose.
Right to delete: Request deletion of your personal information.
Right to opt out of sale: We do NOT sell personal information, so this right is automatically satisfied.
Right to non-discrimination: We will not discriminate against you for exercising your rights.

8. Children's Privacy

The App is designed for use by Shopify merchants operating businesses. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe we have inadvertently collected such data, please contact us immediately.

9. International Data Transfers

Our services are hosted in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the App, you consent to this transfer. For EEA/UK users, such transfers are governed by the Data Processing Agreement below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App dashboard or email. The "Last Updated" date at the top reflects the most recent revision. Continued use of the App after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact:
Customer Income Insights LLC
Email: [email protected]

Data Processing Agreement (DPA)

Effective Date: April 10, 2026
Last Updated: February 24, 2026

This Data Processing Agreement ("DPA") governs the processing of Personal Data by Customer Income Insights LLC ("Processor," "we") on behalf of the Merchant ("Controller," "you") in connection with the Customer Income Score application. This DPA is incorporated into and forms part of the Terms of Service.

1. Definitions

"Personal Data" means any information relating to an identified or identifiable natural person processed through the App, including customer names, email addresses, shipping addresses, and derived wealth scores.
"Processing" means any operation performed on Personal Data, including collection, storage, analysis, modification, retrieval, and deletion.
"Data Protection Laws" means all applicable data protection and privacy laws, including the GDPR (EU) 2016/679, the UK GDPR, the CCPA (California Civil Code 1798.100 et seq.), and any amendments thereto.
"Sub-processor" means any third party engaged by us to process Personal Data on your behalf.

2. Scope and Purpose

We process Personal Data solely for the purpose of providing the Customer Income Score service as described in the Terms of Service. Specifically:

Receiving customer shipping addresses from your Shopify store.
Sending addresses to Google Gemini AI for wealth estimation (inference only).
Storing generated wealth scores, segments, and related estimates in our database.
Writing customer tags back to your Shopify store.
Displaying results in the App dashboard.

We will not process Personal Data for any purpose other than providing the service, unless required by applicable law.

3. Controller and Processor Roles

For the purposes of Data Protection Laws:

You (the Merchant) are the Controller of your customers' Personal Data. You determine the purposes and means of processing.
We (Customer Income Insights LLC) are the Processor, processing Personal Data on your behalf and in accordance with your instructions as expressed through your use of the App.

4. Obligations of the Processor

We shall:

Process Personal Data only on your documented instructions (i.e., as necessary to provide the App's functionality).
Ensure that persons authorized to process Personal Data have committed themselves to confidentiality.
Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (see Section 6).
Assist you in responding to data subject access requests and other rights requests.
Assist you in ensuring compliance with obligations regarding data breach notification.
Delete or return all Personal Data upon termination of the service, at your choice.
Make available to you all information necessary to demonstrate compliance with this DPA.

5. Sub-processors

You authorize the use of the following sub-processors:

Sub-processor	Service Provided	Data Processed	Location
Google LLC	AI Analysis (Gemini API)	Customer shipping addresses (inference only)	USA
Railway Corp	Application and Database Hosting	All stored data (encrypted at rest)	USA
Shopify Inc.	Platform Integration and Billing	OAuth tokens, customer tags, billing records	Canada / USA

We will notify you before adding or replacing any sub-processor. If you object to a new sub-processor, you may terminate the service by uninstalling the App. We ensure that each sub-processor is bound by data protection obligations no less protective than those in this DPA.

6. Security Measures

We implement appropriate technical and organizational measures, including:

Encryption in transit: All communications use HTTPS/TLS 1.2+.
Encryption at rest: Database storage is encrypted using industry-standard encryption.
Access controls: Strict role-based access; API tokens and secrets stored securely.
Webhook integrity: All Shopify webhooks verified via HMAC-SHA256 signature validation.
Data isolation: Merchant data is logically isolated; no cross-merchant data access.
Incident response: Procedures for identifying, reporting, and remediating security incidents.
Regular updates: Dependencies and infrastructure kept up to date with security patches.

7. Data Subject Rights

We will assist you in fulfilling your obligations to respond to requests from data subjects exercising their rights under Data Protection Laws, including rights of access, rectification, erasure, restriction, portability, and objection. We respond to Shopify's mandatory GDPR webhooks (customer data request, customer data erasure, and shop data erasure) to facilitate these rights programmatically.

8. Data Breach Notification

In the event of a Personal Data breach, we will:

Notify you without undue delay, and in any event within 72 hours of becoming aware of the breach.
Provide sufficient information to enable you to meet any obligations to report or inform data subjects of the breach.
Cooperate with you and take reasonable steps to assist in the investigation, mitigation, and remediation of each breach.

9. International Transfers

Personal Data is transferred to and processed in the United States. For transfers from the EEA/UK, we rely on:

Standard Contractual Clauses (SCCs) as adopted by the European Commission, which are incorporated into this DPA by reference.
The data importer's commitment to implement supplementary measures where necessary.

10. Duration and Termination

This DPA remains in effect for as long as we process Personal Data on your behalf. Upon termination of the service (e.g., App uninstallation), we will delete all Personal Data within 30 days, unless retention is required by applicable law. You may request confirmation of deletion.

11. Liability

The liability of each party under this DPA is subject to the limitations of liability set forth in the Terms of Service.

12. Contact

Customer Income Insights LLC
Data Protection Contact
Email: