Fondetto Privacy Policy
Last updated: 13 October 2026 (before the first release)
Fondetto ("the App") is a Shopify app operated by Vitalcore Research Inc., doing business as Nolarine ("we", "us"), 30 N Gould St, Ste R, Sheridan, WY 82801, USA. It lets Shopify merchants build their store's design, pages, menus, product copy and translations with AI, on a draft copy of their own Shopify theme. This policy explains what information the App collects, why, and what rights you have.
Who this policy covers
- Merchants: the Shopify stores that install the App, and the store staff who use it.
The App does not read or store information about the store's customers. It requests no access to orders, customers or checkouts. Merchants who need a data processing agreement can ask for one at support@nolarine.com.
Information we collect
From merchants, when the App is installed:
- The store's Shopify domain, and the name and email of the staff member signed in to the App, which Shopify provides so the App knows who is using it.
- A Shopify access token so the App can do its job. It is stored in a database on our server that is not reachable from the internet.
- The plan, the trial dates, how much of the plan's limits has been used this billing cycle, the store's main language, and which theme the App works on.
What the merchant gives the App:
- The brand brief: the store name, what it sells, who it is for, its promise, facts about the products, the tone, words to avoid and colour preferences. It contains only what the merchant types. If the merchant includes a person's name (for example a founder's name for the About page), it is kept as part of the brief.
- Logos and photos the merchant adds go from their browser straight to their store's Shopify Files. They are not stored on our server.
Produced while the App works:
- A record of each build or edit: what was done, when, whether it finished, and how much AI it used.
- Before the App changes anything in the store, a copy of what it is about to replace (the previous content of each theme file, and the previous text of each product, page and menu it changes), so the merchant can undo the change. This is the store's own content; the App keeps the last 30 versions.
- Proposed product descriptions and search engine text waiting for the merchant to apply or discard them.
We do not collect or store card numbers or other payment credentials. Shopify bills the App's plans.
The App adds nothing to the merchant's storefront: no scripts, no cookies and no tracking. Everything it builds is ordinary Shopify content in the merchant's own store.
How we use it
- To provide the App's features to the merchant: generating and writing the store's design, pages, menus, product copy and translations, and undoing changes.
- To keep within the plan's limits and to watch our AI costs.
- To provide support, keep the App secure, and fix problems.
We do not sell personal information, and we do not use it for advertising or profiling. We never use merchant data to train AI models, and our AI provider may not either (see below).
Legal basis. We rely on our contract with the merchant (providing the App they installed) and our legitimate interest in keeping it secure and supporting it.
Who we share it with
Only service providers that help us run the App, under contracts that limit their use of it:
| Provider | Purpose | Location |
|---|---|---|
| Shopify | The platform the App runs on | Canada / worldwide |
| Anthropic, PBC | The AI model that writes the store's text and design (see below) | United States |
| Hetzner Online GmbH | Application hosting and database (encrypted HTTPS connections; daily backups) | Germany (Falkenstein), European Union |
| Cloudflare, Inc. | Domain name service, and forwarding of email sent to support@nolarine.com | United States / worldwide |
| Google LLC | The mailbox where support email is read and answered | United States / worldwide |
What the AI provider receives. To write the store, the App sends Anthropic the brand brief, the product titles, descriptions, options and attributes, product image addresses (only when writing copy from photos), the instructions the merchant types, and the descriptions of the theme's sections. It does not send customer information (we have none), staff names or emails, or access tokens. Anthropic's commercial terms (effective 17 June 2025) say it "may not train models on Customer Content from Services", and by default it deletes API inputs and outputs within 30 days (longer only where its usage policy or the law requires).
We may also disclose information if required by law.
How long we keep it
- While the App is installed, we keep the records the App needs to work.
- Records of builds and edits are deleted after 90 days. Proposed product text that is not applied is deleted after 90 days. Of the copies kept for undo, only the last 30 versions per store are kept.
- When a merchant uninstalls the App, Shopify notifies us 48 hours later and we delete that store's data within 30 days. Nothing the App built is removed from the store: it is the merchant's content.
- After a store uninstalls, we keep only its Shopify domain and the date its free trial started, so that each store gets one free trial. This contains no personal information.
- Database backups are kept for 14 days, so deleted information leaves them within 14 days of being deleted.
- Server logs hold store domains and job numbers, never names, emails or the text of the brief; they are rotated automatically and kept only for a short time.
- Support emails are kept for up to 24 months after the conversation ends, then deleted.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. Contact us at support@nolarine.com. We respond within 30 days. You can also complain to your local data protection authority.
Security
Data is sent over HTTPS and stored with our hosting provider, encrypted at rest, with access limited to what the App needs. Only Nolarine's operator can reach the server and its database, by key login. To help a store, we look at its plan, its settings and the status of the App's work for it, and every operator action is logged. No system is perfectly secure, but we take reasonable steps to protect your information. If a security incident exposes personal information, we tell affected merchants within 72 hours of finding out. Report a security problem to support@nolarine.com.
International transfers
We are based in the United States and our providers may process data in other countries. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.
Children
The App is for businesses and is not directed at children under 16.
Changes
We will post any changes on this page and update the date above. Significant changes will be announced to merchants in the App.
Contact
Vitalcore Research Inc. (Nolarine) 30 N Gould St, Ste R, Sheridan, WY 82801, USA Email: support@nolarine.com