Last updated: 29 September 2026
M4 SAS (“we”, “us”) provides Experaise CRO, a Shopify app that builds your homepage, collection pages and product pages from your own products, collections and published content, and writes them into an unpublished copy of your theme. It can also compare one of these pages with your current page in an A/B test. This policy explains what information Experaise CRO accesses, what it stores, who processes it and for how long, when you install or use the app.
What Experaise CRO accesses through Shopify
When you install Experaise CRO, you grant it the following permissions, and only these:
- Themes (read and write): read your published theme and write the generated pages into an unpublished copy of it. Outside A/B tests, Experaise CRO never edits your published theme; it never publishes a theme.
- Products and collections (read): titles, descriptions, prices, images and ratings shown on your store.
- Online store pages (read): content of your pages, used as a source for texts.
- Files (read and write): read your store images and upload the images Experaise CRO creates for your pages.
- Legal policies (read): your refund, shipping and other policies, so that the texts only state commitments you actually publish.
Only if you start an A/B test, Experaise CRO asks for three more permissions: Web pixels and Customer events, to install a measurement pixel, and Orders (read), to check whether an order counted in the test is a test order, cancelled or paid, and its subtotal. Experaise CRO never reads your customers’ names, email addresses, phone numbers or postal addresses, and does not access your payments.
A/B tests on your storefront
During a test, the app adds the tested page to your published theme as new files named after the test, and deletes them when the test ends; your existing theme files are never modified. The app embed “Experaise A/B”, which you turn on in the theme editor, draws each visitor at random into version A or B and keeps that version in the visitor’s browser storage, so that they always see the same page. This keeps no personal information, and it reaches us only as described below.
Only for visitors who accept analytics in your cookie banner (Shopify’s customer privacy setting), the pixel sends us: a random browser identifier provided by Shopify, the version seen, page views, time spent and bounce, add-to-cart events, and for completed checkouts the order number, checkout token, total and currency. Order data is encrypted in our database. If a visitor withdraws consent, everything their browser sent is deleted and later sends are refused. You remain responsible for your cookie banner and for informing your visitors, for example in your store’s privacy policy.
What we store
- Your store domain and the access token Shopify gives the app, used to act on your behalf.
- The content we read to build your page: public pages of your storefront (homepage, policies, blog articles), product and collection information, and the customer reviews already published on your store, including the reviewer names as displayed.
- What we generate: texts, images and screenshots of the generated sections shown in the app.
- Your subscription status and credit balance. Payments are handled by Shopify; we never see your payment details.
- If you choose to enter it, your storefront password, encrypted, used only to take screenshots of the unpublished copy.
- If you run A/B tests: their settings and results, and the measurement events described above.
- If you contact support, your messages and the contact details you give us.
We do not store the name or email address of the staff member who uses the app.
How we use it
Only to provide the service you asked for: understand your store, choose and write the sections of your pages, create the images it needs, show the result in the app, measure your A/B tests, bill your subscription through Shopify and answer your support requests. We do not sell your data and do not use it for advertising.
Who processes it
- Shopify: the platform the app runs on, and billing.
- Anthropic: writes the texts of your page from your store content, through its API.
- OpenAI: creates images from your product photos, through its API.
- Hostinger: hosts our servers and database.
- Crisp: support chat, if you use it.
Anthropic and OpenAI process this content under their API terms, which exclude using API data to train their models by default.
Data we process on your behalf
For your visitors’ A/B measurement data, you are the controller and M4 SAS is your processor. We process it only to measure your tests and show you their results, following the instructions you give through the app. We do not use it for any other purpose and do not share it, except with our hosting provider listed above. Access is limited to the people who operate the service. We notify you without undue delay of any data breach affecting it, and we delete it as described below, or return it to you on request. By running an A/B test, you accept these terms, which form our data processing agreement with you.
How long we keep it
We keep your data while Experaise CRO is installed. When you uninstall it, we stop all work for your store and delete your data at the latest 30 days later, or as soon as Shopify sends us its data erasure request for your store. A/B measurement events are deleted 13 months after we receive them, or earlier when you uninstall the app, when a visitor withdraws consent or when Shopify forwards a customer’s erasure request. Database backups, when made, are deleted within 30 days. We keep only an irreversible fingerprint of your store domain, so that a free trial or a review code cannot be used twice. Pages and images already written to your store stay in your store until you delete them.
Your rights
You can ask us to access, correct or delete your data at any time by writing to contact@clickroad.fr. We also honour the data requests that Shopify forwards to us. If you are in the European Union, you can lodge a complaint with your data protection authority (in France, the CNIL).
Cookies
The app itself uses the session provided by Shopify and no tracking cookies. On your storefront, during a test, the Experaise A/B embed keeps the visitor’s version in the browser storage, and Shopify loads our measurement pixel only for visitors who accept analytics. The Crisp support chat sets its own cookies when you use it.
Changes and contact
We may update this policy; the date at the top shows the latest version. For any question: M4 SAS, 131 Boulevard Pereire, 75017 Paris, France, contact@clickroad.fr.