Privacy and security in Velocity Pulse
Velocity Pulse works on your live Shopify store, so it is built to read what it needs, change only what you approve, and let you undo it. This page summarises how; the Velocity Pulse Privacy Policy is the full statement.
AI suggests. Deterministic maths decides.
AI only suggests ways to recover a slowing product and helps explain what changed. Whether a product is slowing, and whether an idea is safe to launch, is decided by deterministic, quantitative mathematics, tested against your margin floor and discount limits.
- AI only suggests recovery possibilities. AI never sets a discount
- Deterministic, quantitative mathematics decides what is safe to launch
- You approve each action, and it rolls back if you cancel
What data Velocity Pulse reads
Through Shopify's API, Velocity Pulse reads your products, inventory, locations, orders and product publications, which it needs to measure each product's sales velocity. It is designed not to store customer names, email addresses, phone numbers, street addresses or payment details unless a privacy, audit or support workflow requires them.
What it can change, and when
It changes product prices, discounts and publication only to launch an action you have approved: a markdown, a flash sale or clearance. You approve each action. Autonomous mode is opt-in, and AI-found possibilities never launch on their own. Nothing is recommended below your margin floor; if a unit cost is missing, the idea is held and you are told why.
Cancelling an action rolls it back: previous prices are restored and the discount is removed. An action is shown as live only once your store confirms the launch.
How AI is used
AI suggests recovery possibilities and helps explain findings. It cannot approve or launch anything: every possibility must pass our quantitative validation and then your approval. The quantitative analysis, not the AI, determines whether a product is slowing.
Access and sign-in
Velocity Pulse runs inside Shopify admin and uses Shopify's authentication. Role-based access with pre-defined app roles. On Enterprise, access can come from your identity provider (Microsoft Entra ID, Okta, Ping Identity or any SCIM 2.0 provider), with automatic provisioning.
Uninstall and deletion
When you uninstall, Shopify session data and app access tokens are removed promptly. When Shopify later sends its shop deletion request, the shop record and related app data are deleted unless the law requires longer retention. Velocity Pulse handles Shopify's mandatory privacy webhooks for customer data requests and redaction.
Questions about privacy or security: support@sparande.co.uk. See also Sparande's security overview and the Velocity Pulse Terms of Service.