Draft. Review by a lawyer before publishing.

Privacy policy

Last updated: 25 October 2026

This policy explains, in plain language, what data flareOps handles on this website and in the flareOps WooCommerce plugin during the free design-partner pilot. flareOps is run by its founder in Israel. Contact: hello@flareops.ai.

1. This website

• No cookies, no analytics, no trackers. The site loads no third-party scripts.
• Hosting logs. The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse.
• Email. If you write to hello@flareops.ai, we receive your email address and whatever you include. Mail is forwarded by Cloudflare Email Routing to a Google (Gmail) mailbox. We use it only to reply and to run the pilot.

2. The pilot plugin

The plugin only starts sending data after the store owner gives consent in the plugin settings. In the pilot, the store owner is in control of the data and we process it on their behalf.

What the plugin collects

• Product catalog data: titles, descriptions, prices, stock, images, categories, brand, SKU and barcode (GTIN). This is data the store already publishes.
• AI-referral counts: aggregate counts of visits that arrived from AI apps (for example chatgpt.com), without cookies and without identifying visitors.
• AI-bot and search-bot request logs: bot name, page, time, response code and the bot's IP address (used to verify the bot is genuine). The full IP address is kept for at most 7 days, then shortened so it no longer points to a single device.
• Orders from AI apps: a one-way coded order reference (not the real order number), date, total and source only. Referrer addresses are stored without query strings.
• Search Console and Bing Webmaster data: read-only (see below).

What the plugin never collects

• No shopper personal data: no names, emails, addresses, phone numbers or account details.
• No payment data.
• No tracking of individual shoppers across pages or sites.

Google and Bing verification

To read Search Console and Bing Webmaster data, the plugin adds a verification tag so flareOps is listed as a verified owner of the site in those tools. We use this access read-only. The tag is removed when the plugin is uninstalled, and the store owner can remove our access in Search Console or Bing at any time.

3. How we use the data

• To suggest product data fixes and publish product feeds the store owner approved.
• To measure AI visibility and write weekly and final pilot reports.

We do not sell data, we do not share it with anyone except the service providers below, and we do not use it for advertising.

4. Service providers (sub-processors)

Some providers process data outside Israel and the EU, including in the United States.

5. How long we keep it

• Bot request logs inside the plugin: full IP addresses are shortened after 7 days, and raw log rows are deleted after 30 days. Daily totals are kept for the pilot.
• Copies of plugin data on our side: deleted within 90 days after the pilot ends, or sooner on request.
• Pilot reports: kept as long as useful to the store owner and to us, in aggregate form.
• Emails: kept as long as needed for the conversation.

6. Your choices and rights

You can ask us to show, correct or delete data about you or your store, or to stop processing it, by writing to hello@flareops.ai. Store owners can also withdraw consent in the plugin or uninstall it at any time. Depending on where you live, you may have rights under laws such as the GDPR or Israel's Privacy Protection Law, including the right to complain to a data protection authority.

7. Changes

If we change this policy, we will update the date above and tell pilot partners by email before the change takes effect.