Ready Your Store -- Third Cache Pty Ltd (ABN 69 138 584 228)
Effective date: on installation · Last updated: 15 July 2026
Ready Your Store ("RYS", "we", "us", "our") is a Shopify application operated by Third Cache Pty Ltd (ABN 69 138 584 228), a company registered in Melbourne, Australia. This Privacy Policy explains how we collect, use, store, and protect information when you use our application.
We comply with the Australian Privacy Act 1988 (including the Australian Privacy Principles), the EU General Data Protection Regulation (GDPR), and Shopify's data protection requirements.
By installing and using RYS, you agree to the practices described in this policy. If you do not agree, please uninstall the application.
When you install RYS, we access the following data through the Shopify API to scan your store and apply fixes:
| Scope | Data Accessed | Purpose |
|---|---|---|
| read_products / write_products | Product titles, descriptions, variants, metafields, images | Scan for AI-visibility gaps; apply approved fixes to product metafields |
| read_content / write_content | Pages, blog posts, articles | Scan content quality; apply approved content fixes |
| read_themes / write_themes | Theme files, template structure | Scan theme configuration; install theme app extension for schema injection |
| read_inventory | Inventory levels, stock status | Scan for inventory-related schema accuracy |
| read_locations | Store locations | Scan for local business schema and location-based trust signals |
We generate and store the results of each scan, including your readiness scores (GEO, UCP, and AP2), category breakdowns, and per-technique outcomes. This data is linked to your store.
We maintain an audit trail of all fixes: what was changed, when, who approved it, and rollback data (retained for 72 hours).
When you use the Content Engine, we store draft content generated by AI until you approve, edit, or discard it.
Your Shopify store domain, store name, and Shopify plan information. Billing is handled entirely by Shopify -- we do not process or store payment information.
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 6.
The Content Engine uses large language models from Anthropic (Claude) and OpenAI (GPT) to generate content suggestions for your store. When you request content generation:
Additional AI model providers may be added as the field evolves. We will update this policy and our Sub-Processor List accordingly.
Under GDPR Article 6, we process your data on the following bases:
| Basis | Application |
|---|---|
| Contract Performance | Processing necessary to provide the RYS service you have installed and subscribed to |
| Legitimate Interest | Aggregated analytics to improve scanning accuracy and product quality (your data is de-identified) |
| Consent | Optional marketing communications (you can unsubscribe at any time) |
| Legal Obligation | Compliance with applicable laws including Australian tax obligations |
We share data only with the following categories of third-party service providers, each under appropriate data processing agreements:
| Provider | Purpose | Data Shared |
|---|---|---|
| Shopify Inc. | Platform, billing, app hosting | Store data, merchant account info |
| Supabase Inc. | Database and authentication | All application data (encrypted at rest) |
| Railway Corp. | Application hosting | Application logs, API traffic |
| Sentry | Error tracking | Error reports (PII filtered) |
| Anthropic PBC | AI content generation | Product data for content generation |
| OpenAI Inc. | AI content generation | Product data for content generation |
| Porkbun LLC | Transactional email | Email addresses, email content |
For a detailed list, see our Sub-Processor List. We will notify active merchants before adding new sub-processors.
We do not sell, rent, or trade your information to any third party for marketing purposes.
Third Cache Pty Ltd is an Australian company. Your data may be processed in jurisdictions outside Australia by our sub-processors, including the United States and Canada. Where data is transferred outside the European Economic Area, we rely on:
We retain your data only as long as necessary to provide the service. For full details, see our Data Retention and Deletion Policy.
| Data Type | Retention Period |
|---|---|
| Store metadata | While installed + 30 days after uninstall |
| Product data | While installed, deleted on uninstall |
| Scan results and readiness scores | While installed + 90 days after uninstall |
| Operational fix history (approvals, rollback data) | Rollback data 72 hours; remaining operational records deleted on a verified data-deletion (shop/redact) request |
| Compliance evidence receipts | Append-only and tamper-evident. Not deleted on uninstall or by data-deletion requests -- see Section 9. Retained as an immutable compliance record; a 7-year retention schedule aligned with Australian record-keeping norms is being finalised. |
| AI-generated content drafts | While installed, deleted on uninstall |
| Customer PII | Not collected |
The compliance evidence receipts in the row above are the one class of data we deliberately do not erase on request. They are a hash-chained, append-only ledger, so deleting a row would break the integrity proof. This is described in Section 9, and the lawful erasure of any personal data these receipts may contain is addressed there rather than by deletion.
To make our fixes accountable and auditable, RYS keeps a tamper-evident record of the significant actions it takes on your store. We call these evidence receipts. They exist so that, if a scan result or an applied fix is ever questioned, there is an independently verifiable record of what happened and when.
A receipt is created for actions such as: a scan completing, a fix being applied, a fix being rolled back, a merchant approval, and disclosure events. Each receipt records the nature of the action, the store data involved (for example, the before and after values of a product field that a fix changed), and the time it occurred.
Because the ledger is append-only, evidence receipts are deliberately excluded from the deletion performed on a Shopify shop/redact (data-deletion) request; all other store data is deleted as described in Section 8. Our intended mechanism for erasing any personal data that a receipt may contain is cryptographic erasure -- destroying the key needed to read an encrypted field, so the record stays intact and verifiable but the sensitive value becomes unrecoverable -- rather than deleting the receipt. This erasure mechanism is a stated intention that depends on the minimisation control above and is not yet operational. If you need personal data within the evidence layer addressed before then, contact us at support@readyyourstore.com.
In the interests of transparency, and ahead of the automated-decision-making disclosure requirements being introduced under the Australian Privacy Principles (APP 1.7), which take effect on approximately 10 December 2026, we describe here how RYS uses automated processing.
RYS uses automated processing in two ways:
These automated processes produce scores, findings, and draft suggestions only. They do not, on their own, make decisions that produce legal or similarly significant effects about an individual, and they are not applied to your store automatically: a proposed fix or generated content is only applied after you review and approve it. A human -- you, the merchant -- remains in the loop for every change.
You may ask us how a particular scan result or AI suggestion was produced, or request human review of an outcome, by emailing support@readyyourstore.com.
If you are in the European Economic Area, you have the following rights:
To exercise any of these rights, email support@readyyourstore.com. We will respond within 30 days.
Under the Australian Privacy Principles (APPs), you have the right to:
RYS is an embedded Shopify application. Our cookie usage is minimal:
We do not use analytics cookies, advertising cookies, or third-party tracking cookies. For full details, see our Cookie Policy.
RYS is a business tool for Shopify merchants. It is not directed at children under the age of 16. We do not knowingly collect information from children.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Continued use of the application after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights:
Email: support@readyyourstore.com
Company: Third Cache Pty Ltd
ABN: 69 138 584 228
Location: Melbourne, Australia
Terms of Service · Data Retention Policy · Cookie Policy · Sub-Processor List