Converta is a buyer-facing translation app for OpoShop stores. It shows each shopper the store's own words (product text, page text, buttons and menus) in their own language, with a switcher so they can change it. It changes displayed words only. It can translate the words shown in a cart, but it never changes prices and never changes how the cart or checkout work. This policy explains exactly what data Converta accesses, why, and how it is protected.
Converta reads the text shown on your store so it can translate it. It never takes part in checkout or payments, never stores payment card data, and has no shopper accounts. Your translation provider key is encrypted and can never be read back, by you or by us, and it is deleted if you uninstall. A shopper's language preference is used in the moment and never stored on our side. We keep the text found on your store, its translations and anonymous per-language counts, scope every record to your store, and never sell data.
1. Merchant store data (via OpoShop OAuth)
When you install Converta from OpoShop, you authorize it with read-only access: your account and store identity, and your products and collections. Converta uses it to confirm the store is yours and to read the text you have published in your catalogue (product names, description blocks, option names, collection names) so it can translate that text. Catalogue access is granted by OpoShop. Until it is, Converta works from the text on your live store pages only (section 4). Converta never writes to your store, never reads your customers, orders, or payouts, and never places, edits, cancels, or fulfills anything.
1a. Your translation provider key
Converta translates using your own OpenAI or DeepL account. When you paste that key, it is encrypted at rest with AES-256-GCM before it is stored, and it is used only to translate your own store's text. It is never written to a log, never returned to any client, and there is deliberately no way to read it back out, through the app or any other way, by you or by us. Converta will only ever report that a key exists and its last four characters. If you remove it, translation stops immediately and the key is deleted. It is also deleted when you uninstall Converta, as soon as OpoShop confirms the uninstall to us. What is sent to your provider is text from your store (see section 4 for what is collected and what is kept out).
2. Shopper language (used in the moment, never stored)
To auto-select a shopper's language, Converta reads the language preferences their own browser sends with the request, and, only when that yields nothing, a coarse 2-letter country supplied by the hosting edge network. Both are used transiently to choose which language to display and are then discarded. Converta does not store the shopper's IP address, does not track shoppers across sites, and does not build any shopper profile. A shopper's manual language choice is remembered only in their own browser (localStorage) so their preference sticks on return.
3. No payment card data, no checkout access, no price changes
Converta changes words on the page and nothing else. Prices and order numbers are left exactly as they are, because a translated price would be a wrong price. It never receives, stores, or has access to payment card details or any billing information, and it never changes how checkout works.
4. Text collected from your store pages, and sent to your translation provider
Buttons, menus and page text appear in no catalogue, so Converta's storefront script reads the visible text of your store pages as they are viewed and sends phrases it has not seen before to Converta. Those phrases are stored, sent to OpenAI or DeepL with your own key to be translated, and the translations are then served to any visitor who views your store in that language. You can switch this off in the control panel ("Learn from your live storefront").
This is built to collect your store's wording, not your shoppers' details, and these limits apply:
- It does not collect text from account, order, checkout, sign-in or password pages.
- It never reads form fields, so what a shopper types into a box is not collected. Personalisation text that the cart shows back (a name to engrave, a gift message) is skipped too, and so is the cart page.
- Anything that looks like data rather than wording is rejected before it is stored or sent: prices, web addresses, email addresses, and long number runs such as order or phone numbers.
- A theme can mark any block as private (
data-converta-private) and Converta will not collect from it.
These limits reduce, but cannot fully rule out, that a line of text a page shows to one shopper (for example a greeting with a name, on a page outside those listed) is collected as if it were store wording. If your theme shows personal details on ordinary pages, mark those blocks private or switch the feature off. You can read every collected phrase on the Translations page, and we will delete any of it on request.
Shopper page views are served from Converta's own saved translations: a shopper's visit never triggers a call to a translation provider.
5. Where data is stored
Converta data lives in Converta's own dedicated database, with every record scoped to a single store. No store can see another's settings, translations, or key. Your OpoShop access token is stored securely and used only to read your own store's published text on your behalf.
6. Analytics
Converta counts, per day, how many pages were shown in each language and how many times shoppers switched language. These are anonymous aggregate counts: a tally per language, never tied to an individual shopper, IP, page, or location. Converta also records the last time its script was loaded on your store (a single time, nothing about the visitor) so the app can tell you whether it is really running. Converta uses privacy-respecting product analytics (PostHog) to improve the app itself, tagged with a non-identifying store id, never a shopper's personal information.
7. We never sell your data
Converta does not sell, rent, or share your store data with third parties for their own use.
8. Retention & deletion
While Converta is installed it keeps your settings, the text found on your store and its translations, your encrypted provider key, and the anonymous per-language counts. Text your store stops using is removed automatically after 90 days. If you uninstall Converta, processing of your store's data stops and your provider key is deleted. Your settings and translations are kept so a reinstall picks up where it stopped. We delete them on request, and may delete saved translations once a store has been uninstalled for 30 days or more. To request deletion, email us.
9. Contact
Questions about privacy? Email brandon@tryfound.io.