Everything you need to know about how Qubify operates, protects your data, and complies with applicable law.
Last updated: March 19, 2026
Qubify is designed to help Shopify merchants provide better customer experiences through AI-powered assistance. To protect the integrity of our platform and the safety of all users, the following uses are strictly prohibited:
Illegal Products or Services
Using Qubify to sell, promote, or support products or services that are illegal in your jurisdiction or the jurisdiction of your customers.
Deceptive Practices
Configuring the AI assistant to make false claims, misrepresent products, create fake urgency, or engage in any form of consumer deception.
Harassment and Abuse
Using the Service to harass, threaten, or abuse customers, competitors, or any third parties.
Data Harvesting
Using the Service to collect customer data beyond what is necessary for legitimate commerce and support purposes.
Competitive Intelligence
Using the Service to scrape competitor data, train competing AI systems, or reverse-engineer Qubify's technology.
Circumventing Security
Attempting to bypass authentication, exploit vulnerabilities, or interfere with the Service's infrastructure.
Regulated Advice
Using the AI assistant to provide medical, legal, financial, or other regulated professional advice without appropriate disclaimers and qualified human oversight.
Violations may result in immediate account suspension without refund. We reserve the right to report illegal activity to appropriate authorities.
For merchants operating in the European Economic Area (EEA) or United Kingdom, Qubify acts as a data processor when processing your customers' personal data on your behalf. You, as the merchant, are the data controller.
Our Data Processing Agreement includes:
To request a signed DPA, please email [email protected] with your business name and registered address.
Protecting your store data and your customers' information is a core responsibility we take seriously. Our security programme includes:
Encryption in Transit
All data transmitted between your store, your customers, and Qubify is encrypted using TLS 1.2 or higher.
Encryption at Rest
All stored data is encrypted using AES-256. Database credentials and secrets are stored in a dedicated secrets manager.
Access Controls
Role-based access control (RBAC) ensures that employees only access data necessary for their role. All access is logged and audited.
Infrastructure Security
Our infrastructure is hosted on enterprise-grade cloud providers with SOC 2 Type II certification. We conduct regular penetration testing.
Incident Response
We maintain a documented incident response plan. In the event of a data breach, we will notify affected merchants within 72 hours.
Shopify API Security
We use Shopify's OAuth 2.0 flow for authentication and request only the minimum API scopes necessary to provide the Service.
Qubify is committed to compliance with the General Data Protection Regulation (EU) 2016/679 and the UK GDPR. As a data processor acting on behalf of EU/UK merchants:
Our sub-processors are listed in our DPA. We will notify you at least 30 days in advance of adding new sub-processors.
For California residents and merchants with California customers, Qubify complies with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
To submit a CCPA request, contact us at [email protected]. We will respond within 45 days.
Qubify uses artificial intelligence and machine learning technologies, including large language models (LLMs), to power the AI assistant. In the interest of transparency:
For legal inquiries, DPA requests, data subject rights requests, or compliance questions: