DontMisimiPrivacy policy
Last updated 15 October 2026
In short: we collect what we need to migrate your store and to run your account, we keep it only as long as the work needs it, we don't sell it, we don't use AI services in the migration, and we never send your customers' personal data to one.
Who we are
Misimi Corp ("DontMisimi", "we"), 548 Market Street PMB 72296, San Francisco, CA 94104, United States. Contact: hello@dontmisimi.com.
What we collect
- Account details: your name and email address, through our sign-in provider, Clerk.
- Project details: your store's web address, business name, phone number if you give it, the ProductCart edition, messages you send us, and the name you type when you sign the crawl authorisation, with the date and a one-way hash of your IP address.
- Store data: public pages of your store that our crawler reads with your permission, and the control-panel exports you upload (products and categories). If you upload a customer export, we count its rows and do not store them; customer import is done directly into your Shopify store.
- Free scan: the address you scan, the result, and a one-way hash of your IP address (to stop abuse). The scan reads public pages only.
- Shopify access: an access token for the Shopify development store we build for you, stored encrypted.
- Usage data: the pages you visit on this site and in your dashboard, the buttons and links you click, page speed, your browser and device type, the page that referred you, and your IP address with the approximate location worked out from it, collected with PostHog. When you are signed in, these events are linked to your account ID, not your email address. We set no analytics cookies, do not record your screen, and honour your browser’s Do Not Track setting.
- Payments: paid by card through Creem (merchant of record), which issues your tax invoice. We receive the amount, currency, date and the account it belongs to, never your card details, and keep payment records as long as tax and accounting law requires.
How we use it
To audit, plan and perform your migration, to show you its progress, to talk to you about it, to keep a record of what was done (an audit log), to protect the service from abuse, and to see which pages help people and which confuse them, so we can improve the site. We do not sell personal data or use it for advertising.
AI tools
We don't use AI services in the migration: our own software and our team do the work (see Who does what). If that ever changes, we will update this section first, send product information only, and never send your customers' personal data to an AI service. We do not use your data, or data from Shopify, to train AI models.
Who processes it for us
- Cloudflare (hosting and database)
- Clerk (sign-in)
- Shopify (your new store)
- Creem (card payments and tax invoices)
- PostHog (usage analytics, United States)
How long we keep it
Project data (crawl results, uploaded exports, the catalogue we built, redirect lists and the Shopify access token) is deleted automatically 45 days after your store launches or the project is closed, which is after the longest fix window. We keep the project record, payment records and tax invoices, the signed authorisation and the audit log for as long as tax and legal records require. Free scan results are deleted after 12 months. Usage data is kept only as long as we need it to improve the site; ask us and we delete yours.
Your choices
You can ask us for a copy of your data, to correct it, or to delete it, by emailing hello@dontmisimi.com. If you are in California, the EU or the UK, you have these rights under the CCPA/CPRA or the GDPR, and you may complain to your local data protection authority.
Security
Store access tokens are encrypted at rest, every request to our dashboards is checked against your signed-in session, and access to the admin area is limited to our team.
Changes
If we change this policy we will update the date above, and tell active clients by email or in their dashboard.