Converta is a buyer-facing translation app for OpoShop stores. It shows each shopper the store's own words — product titles and descriptions, pages, buttons and navigation — in their own language, with a switcher so they can change it. It rewrites displayed text only: it never touches prices, the cart, or checkout. This policy explains exactly what data Converta accesses, why, and how it is protected.
Converta reads your store's own published text so it can translate it. It never touches checkout or payments, never stores payment card data, and has no shopper accounts. Your translation provider key is encrypted and can never be read back — not by you, not by us. A shopper's language preference is used in the moment and never stored on our side. We keep only anonymous per-language counts, scope every record to your store, and never sell data.
1. Merchant store data (via OpoShop OAuth)
When you install Converta from OpoShop, you authorize it with read-only access
(users:read, plus read access to your published content where your store grants it). Converta uses
it to read your store's identity and the text you have published — product titles and
descriptions, page and blog copy — so it can translate that text. Converta never writes to your store, never
reads your customers, orders, or payouts, and never places, edits, cancels, or fulfills anything.
1a. Your translation provider key
Converta translates using your own OpenAI or DeepL account. When you paste that key, it is encrypted at rest with AES-256-GCM before it is stored, and it is used only to translate your own store's text. It is never written to a log, never returned to any client, and there is deliberately no way to read it back out — not through the app, not through our API, not by us. Converta will only ever report that a key exists and its last four characters. If you remove it, translation stops immediately and the key is deleted. The only thing sent to your provider is your own published store text; no shopper data ever leaves with it.
2. Shopper language (used in the moment, never stored)
To auto-select a shopper's language, Converta reads the language preferences their own browser sends with the request, and — only when that yields nothing — a coarse 2-letter country supplied by the hosting edge network. Both are used transiently to choose which language to display and are then discarded. Converta does not store the shopper's IP address, does not track shoppers across sites, and does not build any shopper profile. A shopper's manual language choice is remembered only in their own browser (localStorage) so their preference sticks on return.
3. No payment card data, no checkout access, no price changes
Converta rewrites words on the page and nothing else. Prices, sizes, order numbers and anything else that is not language are left exactly as they are, because a translated price would be a wrong price. It never receives, stores, or has access to payment card details or any billing information, and it never participates in checkout.
4. Text sent to your translation provider
The only thing Converta sends to OpenAI or DeepL is your own published store text, using your own key. Before any text is stored or sent, Converta rejects anything that looks like data rather than copy — prices, web addresses, email addresses, and long digit runs such as order numbers — so shopper information cannot end up in a translation request even if a page displays it. Every translation is then cached in Converta's own database, and shopper page views are served from that cache: a shopper's visit never triggers a call to a translation provider.
5. Where data is stored
Converta data lives in Converta's own dedicated database, with every record scoped to a single store — no store can see another's settings, translations, or key. Your OpoShop access token is stored securely and used only to read your own store's published text on your behalf.
6. Analytics
Converta counts, per day, how many pages were shown in each language and how many times shoppers switched language. These are anonymous aggregate counts — a tally per language, never tied to an individual shopper, IP, page, or location. Converta also uses privacy-respecting product analytics (PostHog) to improve the app itself, tagged with a non-identifying store id — never a shopper's personal information.
7. We never sell your data
Converta does not sell, rent, or share your store data with third parties for their own use.
8. Retention & deletion
Converta keeps your settings, the cached translations of your own published text, your encrypted provider key, and the anonymous per-language counts. Source text your store stops using is swept automatically after 90 days. If you uninstall Converta, processing of your store's data stops and your data — including your key — can be removed on request. To request deletion, email us.
9. Contact
Questions about privacy? Email brandon@tryfound.io.