Back to home

Privacy Policy

Effective date April 21, 2026
Last updated April 21, 2026

This Privacy Policy describes how ModelMatch, operated by Patriot Performance Gear LLC ("we," "us," "our," or "ModelMatch"), collects, uses, and protects information in connection with the ModelMatch Shopify application and the modelmatchapp.co website (collectively, the "Service").

We are committed to protecting privacy and handling data responsibly. This Policy explains what we collect, why, and what rights you have.

1. Who this Policy applies to

This Policy applies to three categories of individuals:

  • Merchants: Shopify store owners and their staff who install and use ModelMatch to manage part compatibility data.
  • Shoppers: Visitors to a merchant's Shopify storefront who interact with ModelMatch-powered features like the fit check widget, standalone finder, or catalog fit check.
  • Website visitors: Anyone who visits modelmatchapp.co.

2. Information we collect

2.1 Information collected from Merchants

When a merchant installs ModelMatch via the Shopify App Store, we receive and store the following from Shopify:

  • Shop domain (e.g., merchant-store.myshopify.com)
  • Contact email address
  • Shopify session tokens (used to authenticate API calls)
  • Basic shop metadata (name, timezone, currency)
  • Subscription plan selection and status

Merchants also create their own data within ModelMatch, including:

  • Compatibility records (SKU, brand, model, and related fields)
  • Imported CSV data
  • Product mapping configurations
  • Notification and theme preferences

Billing is handled entirely by Shopify through Shopify Managed Pricing. We do not collect, store, or have access to merchant credit card information, bank account information, or other payment instruments.

2.2 Information collected from Shoppers

When a shopper interacts with a ModelMatch-powered feature on a merchant's storefront (for example, using the fit check widget or entering brand/model in the standalone finder), we automatically collect:

  • The search query (brand and model entered by the shopper)
  • Whether the search returned a match
  • IP address (for rate limiting, security, and technical diagnostics)
  • User agent string (for technical diagnostics)
  • Session identifier (to remember a shopper's saved model across page views on the same merchant store)
  • Optional: feedback on result quality (thumbs up/down if shopper provides it)

We do not collect shopper names, email addresses, shopper account information, payment details, or any other personally identifying information about shoppers. Shopper searches are linked to the merchant store they occurred on but are not linked to any individual shopper identity.

2.3 Information collected from Website Visitors

When you visit modelmatchapp.co, we collect standard web analytics information:

  • Pages visited and time spent on each
  • Referral source (how you arrived at our site)
  • General geographic location (country/region, derived from IP address)
  • Device type and browser
  • Anonymous behavioral data (clicks, scroll depth)

We use privacy-respecting analytics tools (Cloudflare Web Analytics and/or Google Analytics 4) that do not require consent banners in most jurisdictions because they collect minimal personal data. See our Cookie Policy for details.

2.4 Information received from Shopify Webhooks

ModelMatch subscribes to the following Shopify webhooks to maintain accurate data:

  • products/create, products/update, products/delete — for auto-sync of the merchant's product catalog (Growth and Professional plans only, when enabled)
  • app/uninstalled — to clean up merchant data when the app is removed
  • customers/data_request — mandatory GDPR webhook for shopper data requests
  • customers/redact — mandatory GDPR webhook for shopper data deletion
  • shop/redact — mandatory GDPR webhook for shop data deletion after uninstallation

3. How we use information

3.1 To provide and operate the Service

We use collected information to:

  • Authenticate merchants and serve data to their storefronts
  • Execute compatibility lookups when shoppers interact with ModelMatch widgets
  • Maintain synced product data via Shopify webhooks
  • Generate insights, analytics, and reports shown in the ModelMatch admin
  • Process subscription billing via Shopify's billing API
  • Send operational emails (such as install confirmation, billing events, critical service announcements)

3.2 To improve the Service

We analyze aggregated usage patterns to identify product improvements. This analysis is performed on aggregated, non-identifying data.

3.3 To communicate with merchants

We may send merchants transactional emails related to their account (billing, plan changes, service announcements). Merchants may opt into additional communications such as product updates; these are optional.

3.4 For security, fraud prevention, and compliance

We use technical information (IP addresses, user agents) to detect abuse, apply rate limits, and comply with legal obligations.

3.5 AI-assisted features

When a merchant uses the AI-assisted compatibility mapping feature (available on all plans, with monthly caps that vary by tier), ModelMatch sends the following data from the merchant's Shopify catalog to Anthropic, PBC ("Anthropic") for processing via Anthropic's API:

  • Product names
  • Product descriptions
  • Product variant attributes

Anthropic processes this data under their current API terms and privacy policies, which at the time of this Policy's effective date commit Anthropic to not using data submitted via the Anthropic API to train its models. We do not send shopper data, PII, or merchant account credentials to Anthropic under any circumstances.

4. How we share information

We do not sell personal information. We share information only in the following circumstances:

4.1 Service Providers (Subprocessors)

We use a limited number of service providers ("subprocessors") to operate the Service:

  • Shopify Inc. — app platform, authentication, billing, and webhooks
  • Google Cloud Platform — hosting (Cloud Run) and database (Cloud SQL/PostgreSQL)
  • Cloudflare, Inc. — website hosting, DNS, security, and analytics for modelmatchapp.co
  • Anthropic, PBC — AI-assisted compatibility mapping (all plans, when used by merchant)
  • Google LLC (Workspace) — email correspondence from support@modelmatchapp.co and conner@modelmatchapp.co

Each subprocessor handles data under their own privacy terms. We select subprocessors who maintain industry-standard security and privacy practices.

4.2 Legal compliance

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or the rights, property, or safety of others.

4.3 Business transfers

If Patriot Performance Gear LLC undergoes a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify merchants of any such change via email and post a notice on modelmatchapp.co.

5. Data retention

5.1 Merchant data

Merchant data (shop information, compatibility records, settings) is retained for the duration of the merchant's active ModelMatch subscription.

When a merchant uninstalls ModelMatch or when the shop/redact webhook is received from Shopify (typically 48 hours after uninstall), we delete the merchant's data from our production database within 30 days of the uninstall event.

5.2 Shopper search data

Shopper search events (brand/model queries and match results) are retained according to the merchant's subscription plan:

  • Starter plan: 30 days
  • Growth plan: 90 days
  • Professional plan: 365 days

After the retention period, search events are aggregated into statistical data and the individual records are deleted.

5.3 Website analytics

Website analytics data is retained according to the analytics provider's default retention settings (typically 14–26 months).

5.4 Billing records

Shopify retains billing records per its own policies. We retain minimal billing-related metadata (plan changes, subscription events) for up to 7 years to comply with financial reporting and tax obligations.

6. Security

We implement reasonable technical and organizational safeguards to protect information, including:

  • Encryption in transit (HTTPS/TLS) for all data transmission
  • Encryption at rest for database storage
  • Access controls limiting who can view merchant data
  • Regular security updates and patches
  • Monitoring for unusual access patterns

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee absolute security against all threats.

7. Your rights

7.1 Rights under GDPR (European Economic Area, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

  • Right to access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure ("right to be forgotten"): Request deletion of your data.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to data portability: Receive your data in a portable format.
  • Right to object: Object to certain types of processing.
  • Right to withdraw consent: Withdraw consent for any processing based on consent.

To exercise these rights, contact support@modelmatchapp.co. We will respond within 30 days.

For shoppers: shopper data requests are handled via Shopify's mandatory GDPR webhooks (customers/data_request and customers/redact). Merchants should initiate these through their Shopify admin.

7.2 Rights under CCPA/CPRA (California residents)

If you are a California resident, you have the following rights:

  • Right to know what personal information we collect and how we use it
  • Right to delete personal information (subject to exceptions)
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell personal information)
  • Right to limit use of sensitive personal information (we do not collect sensitive personal information)
  • Right to non-discrimination for exercising these rights

To exercise these rights, contact support@modelmatchapp.co.

7.3 Other jurisdictions

If you reside in another jurisdiction with applicable data protection laws, you may have similar rights. Contact us for details.

8. International data transfers

Our servers are located in the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

For EEA/UK data subjects, we rely on Standard Contractual Clauses (SCCs) and other appropriate transfer mechanisms where required.

9. Children's privacy

ModelMatch is designed for business use by Shopify merchants and their staff. The Service is not intended for use by children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify merchants via email or in-app notice.

Your continued use of the Service after a policy update constitutes acceptance of the updated Policy.