Benetti Product FAQ Privacy Policy

Effective date: 13 September 2026. This is the published privacy policy for the Benetti Product FAQ Shopify application and its Online Store 2.0 theme app extension.

Operator: Benetti Corporation, a Texas C-Corporation
Contact email: benettimedia@gmail.com
Mailing address: Benetti Corporation, 1401 Lavaca Street #40044, Austin, TX 78701, USA
Governing jurisdiction: Texas, USA

1. Scope and Architecture Overview

This privacy policy explains how Benetti Corporation collects, uses, and safeguards information when merchants install and operate the Benetti Product FAQ application on their Shopify stores. Our architecture is engineered from the ground up to be zero-knowledge regarding end-consumer personal data.

Shopify renders the storefront block as HTML using native <details> and <summary> elements. It runs no client-side JavaScript, sets no cookies, and makes no request from the shopper's browser to our servers.

2. Information Processed by the Application

• Merchant Authentication Credentials: The merchant shop domain (e.g. store.myshopify.com), OAuth offline access token, and app install timestamps. These are required to authenticate administrative requests and render the embedded admin page. Stored in Google Cloud Firestore.
• FAQ Content: Questions and answers. Product FAQs are stored in the product's $app:faqs metafield, page FAQs in the page's $app:faqs metafield, and store-wide FAQs in $app:store_faq entries in the merchant's Shopify store. To offer the page form, the app reads the store's page titles; it does not store them. Benetti Corporation does not keep copies of FAQ content.
• Block Settings: Layout, heading, accent color and the FAQPage JSON-LD toggle are theme editor settings that Shopify stores in the merchant's theme; the app does not receive them.

Zero End-Consumer Data Collection: We do not collect, process, log, or sell any consumer personal data. We do not receive shopper names, IP addresses, email addresses, payment information, or browsing behaviors. The application does not engage in behavioral tracking, cross-site tracking, or device fingerprinting.

3. Storefront Delivery and Security

The app delivers storefront output only through a theme app extension. It requests no theme or script-tag scopes, does not modify theme files, and does not inject external scripts into storefronts.

4. Subprocessors and Data Infrastructure

The application administrative backend is hosted on Google Cloud Run within the United States. Merchant session records and authorization tokens are stored in Google Cloud Firestore, encrypted at rest and in transit. No data is shared with third-party advertisers, data brokers, or analytics vendors.

5. Data Retention, Redaction, and Deletion

Merchants can delete individual FAQ entries at any time in Shopify admin by editing the product's Product FAQs metafield or deleting a Store FAQ entry; the app has no delete control. When a merchant uninstalls the application, Shopify automatically dispatches the app/uninstalled and mandatory compliance webhooks (shop/redact). Upon receipt, all merchant session records and configuration caches are permanently deleted from our database within 48 hours.

6. Inquiries and Merchant Rights

Merchants wishing to inspect, export, or permanently erase their administrative account records may submit a formal request to benettimedia@gmail.com. The operator answers a manual privacy or data request within 30 days.