Privacy Policy.

1. Who we are

TestFeed is operated by Yesterday Pty Ltd (ABN 69 670 639 219), trading as TestFeed.

2. What we collect

From your store’s customer and order data, TestFeed builds a behavioral overlay:

• A hashed customer identifier (HMAC-SHA256, one-way, never the raw customer ID)
• Province and country code
• Orders count and total spent
• Last order date
• Product affinity tags

This data is pseudonymized, not anonymous. We minimize what we store and the fields above cannot be used to directly contact or identify a customer, but they may still be considered personal data under some privacy laws.

From you as the merchant, we collect your name, email, store domain, and billing information to operate your account.

3. What we never collect

We do not collect or store names, emails, phone numbers, addresses, or any other direct customer identifier. Shopify sends us full webhook payloads. We extract the fields above and discard the rest. Raw payloads are never stored.

4. Permissions we request

TestFeed requests read_products, read_customers, and read_orders. These permissions are used only to derive the pseudonymized fields in Section 2. Direct customer identifiers such as names, emails, and addresses are never stored.

5. Sub-processors

We use a small number of sub-processors to operate TestFeed:

• A hosting and infrastructure provider.
• An operational telemetry provider. Used for error monitoring, no customer data.
• AI model providers. Process the pseudonymized overlay fields to generate AI panel responses. We do not name specific providers or model versions.

Tools you connect to your own store independently are covered by that provider’s own privacy policy, not this one.

6. Where data is stored

With our hosting and infrastructure provider, in servers used for app data (overlays, sessions) and generated study artifacts. Data is encrypted in transit and at rest.

7. Purpose limitation

We use the data described in Section 2 only for the purposes described in this policy: calibrating your AI panel and running the tests you configure. We do not use it for any other purpose.

8. Retention and deletion

Behavioral overlay data is retained for as long as the app is installed on your store. Within approximately 48 hours of uninstalling the app, all related overlay and account data is deleted from our infrastructure. When Shopify sends a customers/data_request, customers/redact, customers/delete, or shop/redact webhook, we respond within 30 days. Redaction requests result in immediate deletion of matching overlay records.

9. Your rights

You may have rights to access, correct, or delete data relating to you, depending on your location. TestFeed does not sell personal information.

TestFeed’s AI panel generates research insights for the merchant. It does not make any decision about an individual customer’s account, order, or eligibility for anything, and has no legal or similarly significant effect on any individual.

TestFeed does not rely on customer consent to process the data described in Section 2, since it’s derived from backend Shopify webhooks rather than a consent flow, and does not share or sell data.

10. International data transfers

Some of the data described in Section 2 may be processed by sub-processors located outside Australia. We take reasonable steps to ensure this data is protected in accordance with applicable law.

11. Contact us

Yesterday Pty Ltd (trading as TestFeed)
156 Boundary Street, West End, QLD, Australia, 4101
Email: privacy@testfeed.ai