Margaritas.ai Privacy Policy

Last updated: October 26, 2026

This policy explains what data Margaritas.ai (the “App”) reads from Shopify, what it looks up, how long it keeps it, who it shares it with, and how merchants and their customers can get data deleted. The App is operated by IntentSignal Systems, LLC (“IntentSignal”, “we”, “us”), 9355 Gresham Cove, Germantown, TN 38139, United States. Questions: andrew@intentsignal.co.

1. What the App does

Margaritas.ai finds celebrities, influencers and social media stars among a Shopify store’s customers and emails the merchant an alert when one of them places an order.

2. Data we read from Shopify

When a merchant installs the App, we access only the data the merchant approves through Shopify’s permission screen:

Customer data: names, email addresses and, where available, location and the customer ID Shopify assigns.
Order data: order ID, order date, order total and the customer who placed the order, so we can tell when a notable customer buys.
Store data: the store’s domain, the store owner’s name and email address, the App settings the merchant chooses (such as follower thresholds) and the billing plan.

We do not access payment card details. Shopify does not share them with apps.

3. What we look up

To find out whether a customer has a public following, we use the customer’s name and email address to search for matching public social media profiles on Instagram, TikTok, X (Twitter) and YouTube. We store the profile links we find, the public follower counts, and a match score. We only use information that is publicly available. We do not log in to any customer account or access private profiles or messages.

4. How we use data

To scan a store’s customers and show the merchant which of them have a large public following.
To email the merchant an alert when such a customer places a new order, based on the merchant’s follower threshold.
To let the merchant view and export the customers the App has found.
To provide support, keep the App secure and fix problems.

We do not sell data, use it for advertising, or use one store’s data for another store.

5. Who we share data with

We share data only with service providers that help us run the App, under contracts that require them to protect it and use it only for us:

Cloud hosting and database providers, which store the App’s data.
An email delivery provider, which sends alert emails to the merchant.
Public social data providers, which receive a customer’s name and email address only to return matching public profiles and follower counts.

We may also disclose data if the law requires it. If IntentSignal is sold or merged, data may transfer to the new owner under this policy.

6. How long we keep data

While the App is installed, we keep customer, order and social profile data so the merchant can see results and receive alerts.
Social profile results are refreshed periodically and old results are overwritten.
When a merchant uninstalls the App, we stop accessing the store immediately. Shopify sends us a shop deletion request 48 hours after uninstall, and we delete all of that store’s data within 30 days of receiving it.
We may keep billing records longer where tax or accounting law requires it.

7. Deleting data and requesting a copy

Merchants: email andrew@intentsignal.co from the store owner’s address to request a copy of your data or its deletion. We reply within 2 business days and complete requests within 30 days. Uninstalling the App also triggers deletion as described above.

Shoppers: if you bought from a store that uses Margaritas.ai, contact that store to access or delete your data. The store’s request reaches us through Shopify. You can also email us directly and we will work with the store.

We support Shopify’s mandatory privacy webhooks:

customers/data_request: when a shopper asks a store for their data, we send the store all data we hold about that shopper within 30 days.
customers/redact: when a store asks us to delete a shopper’s data, we delete it within 30 days, unless we must keep an order record by law.
shop/redact: 48 hours after a store uninstalls the App, Shopify asks us to delete the store’s data, and we delete it within 30 days.

8. Security

Data is encrypted in transit and at rest. Access is limited to the people who need it to run the App. No system is perfectly secure, and we will notify affected merchants without undue delay if a breach affects their data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, and to complain to a data protection authority. For customer data, the merchant decides how the data is used and we process it on their behalf. To exercise these rights, contact the store or email andrew@intentsignal.co.

10. International transfers

We process data in the United States. Where the law requires it, we use appropriate safeguards for transfers.

11. Changes

If we change this policy, we will update the date at the top. We will notify merchants by email of material changes.

12. Contact

IntentSignal Systems, LLC, 9355 Gresham Cove, Germantown, TN 38139, United States. Email: andrew@intentsignal.co.