Privacy Policy
The short version: Shopfront stores your business details, website content, and published sites. It uses AI to rewrite copy and generate structured data. Published sites have first-party analytics only - no IPs, no cookies, no third-party trackers. You can download your full site as a static pack at any time while you are subscribed.
Account Required
Shopfront requires a Lotlsoft account to function. See the Lotlsoft Privacy Policy for details about account data.
What We Store
When you use Shopfront, we store:
- Account - Email address and display name you sign up with. Used to identify your account and send occasional service emails.
- Content - Business details you enter (name, ABN, industry, addresses, hours, services, photos) and the content blocks for every site on your account. Extracted content from URLs you ask us to read.
- Analytics - Aggregate visitor counts for your published site: page views, referrer category, and device class. Uses a daily-rotating salted hash that cannot be reversed to an IP address. No IPs, no cookies, no cross-site trackers.
- Billing - Subscription state and payment receipts. Payment card details are processed by our payment provider and never seen by Shopfront.
Cookies
We do not use cookies for tracking. We use localStorage to save preferences and sessionStorage during the sign-in process.
Analytics
We use our own privacy-focused analytics (Lotl Observe) to collect minimal anonymous usage data:
- Page views - Which pages are visited (no personal data)
- Anonymous identifiers - A random visitor ID to count unique visitors (not linked to your identity)
- Error reports - Technical errors for debugging (no personal data)
We do not use third-party analytics services like Google Analytics.
Third Parties
We do not sell or share your data. The only external services we use are:
- Payment provider for subscription billing (card details are handled directly by the processor and never stored by Shopfront)
- AI provider for the Humanise pass (content block text is sent for rewriting and is not retained by the model provider for training)
- Google Maps Platform for map images on published sites that show a map. Your visitor's browser fetches the image directly from Google, which sees the visitor's IP address, their User-Agent, the page they were on, and Shopfront's Google Maps API key (used for billing). Google does not receive any Shopfront account identifier tied to the visitor.
Your Rights
You can:
- Access your data (view within the app or export from account settings)
- Correct your data (update profile in account settings)
- Delete your data (from within the app)
- Withdraw consent (sign out and stop using the service)
Contact
Questions about privacy? Visit the Lotlsoft Privacy Policy to send us a message.
Last updated: 2026-04-14
Back to Shopfront