Does Shopify’s AI train on your store data? Shopify’s terms don’t say. A help page that promised not to use one merchant’s store-level data to power Magic for other merchants is no longer published. The features come with the plan you already pay for.
Plain-English risk rating: 3 of 5
Corrected 3 September 2026 — this rating moved from 2 of 5 to 3 of 5. We had described Shopify as excluding training on merchant and shopper data across the board. Shopify’s published commitment is narrower: “Shopify doesn’t use any merchant’s store-level data to power Shopify Magic for other merchants.” That is a commitment about cross-merchant use of store-level data, and the Magic documentation does not address shopper data for this purpose. The error was ours — we wrote a broader claim than Shopify makes. Nothing about Shopify’s conduct has changed and nothing new is alleged.
Shopify's AI features (Magic for content generation, Sidekick for the conversational store-management assistant, Shop AI for shopper-facing chat) sit within Shopify's e-commerce platform. Shopify does not name the large language model providers behind Magic or publish their terms, holds SOC 2 Type II certification, and is PCI-DSS Level 1 certified for the payment-handling parts of its infrastructure. CEO Tobi Lütke's April 2025 internal memo declaring AI use "non-optional" for Shopify employees signals the company-wide commitment to AI integration, which for merchants means the AI features will continue to expand rapidly across the platform.
The risk picture is dominated less by Magic/Sidekick-specific privacy concerns and more by three things: (a) Briskin v. Shopify Inc., the California data privacy class action in which the court denied Shopify's motion to dismiss the amended complaint on 30 July 2026, (b) the Shopify third-party app ecosystem as the dominant breach vector for merchants, and (c) ongoing merchant reports of Sidekick/Magic hallucinating product data in ways that have created brand and SEO problems.
Recommended for
- Sole proprietor: Basic at $39/month includes Magic content generation. Acceptable for store description writing, product copy, marketing email drafts. Review AI-generated content before publication; hallucination risk is real.
- Small team (2-10 people): Shopify or Advanced tier with Magic and Sidekick. The AI features are bundled rather than per-seat-priced, which is favourable for small teams. Establish a workflow where AI-generated product descriptions go through human review before going live.
- Regulated industry: Not typical — e-commerce platforms are not architected for HIPAA or comparable regulated content. Use Shopify for commerce; use dedicated regulated-data systems separately.
- The honest answer for most 1-10 employee e-commerce businesses: Magic and Sidekick are useful productivity tools bundled with the platform you're already paying for. The privacy posture is acceptable. The two practical risks for SMBs are: (1) AI hallucinations in product descriptions that damage SEO or mislead customers, and (2) third-party app ecosystem compromises that have nothing to do with Shopify's AI but everything to do with merchant data exposure.
Critical pre-deployment warning (AI hallucination in production product data)
Multiple merchant reports during 2025-2026 document Sidekick and Magic generating incorrect product specifications, fabricating technical details, corrupting alphanumeric reference codes, and producing inconsistent product descriptions that have created SEO and customer-trust problems. One February 2026 Shopify community post titled "Warning: Shopify AI hallucinates technical data and sabotages strategic SEO" detailed a five-month experience leading to platform migration.
The practical implication for SMBs: do not let Magic-generated product descriptions go live without human review. Sidekick recommendations that involve product data, inventory decisions, or pricing should be treated as draft suggestions, not as authoritative output. The hallucination risk in AI commerce tools is structurally similar to the hallucination risk in AI legal research — the AI sounds confident but the underlying factual accuracy is not guaranteed.
Data retention default
- Standard Shopify retention applies
- LLM provider retention: Shopify does not publish how long its large language model providers keep merchant data. (Corrected 2 October 2026: this previously said “zero-retention under Shopify’s contractual arrangements”. We could not find that commitment in Shopify’s Terms of Service, Privacy Policy, Data Processing Addendum or Shopify Magic help pages.)
- Magic-generated content (product descriptions, marketing copy) saved as drafts until merchant publishes
- Sidekick conversation history retained per workspace configuration
Training opt-out
NO PUBLISHED NO-TRAINING COMMITMENT. Shopify's Terms of Service (section 8) license Shopify to use merchant Materials to operate, improve and promote the Services, and do not mention AI or training. We found no opt-out. Corrected 23 October 2026: this section opened with "No training on customer data by default. Shopify's subprocessor agreements prohibit training on merchant or shopper data. This is contractual rather than user-toggle." Our own 3 September re-check, below, had already shown that to be wrong, and the two sat side by side. Re-checked 3 September 2026, and our wording was BROADER THAN SHOPIFY OWN. What Shopify actually states is narrower: "Shopify doesn't use any merchant's store-level data to power Shopify Magic for other merchants". That is a commitment about CROSS-MERCHANT use of store-level data. It is not a blanket statement that no merchant or shopper data is ever used for training, and Shopify documentation on Magic does not address shopper data for this purpose at all. Read it as a no-cross-merchant-use commitment rather than a general no-training guarantee, and note that Shopify says Magic is built on a combination of its own proprietary data and third-party large language models. Updated 23 October 2026: Shopify no longer publishes that page. The Shopify Magic help pages now redirect to “AI-powered tools”, whose only data line is “You control what data is shared and what access each tool has.” We read the cross-merchant promise on 3 September and 2 October 2026; we cannot say whether it still applies. Shopify’s Terms were updated on 20 October 2026; the licence in section 8.1 is unchanged and the Terms still do not mention AI or training.
Zero Data Retention availability
- No zero-data-retention commitment is published. Shopify’s Terms of Service, Privacy Policy, Data Processing Addendum and Shopify Magic help pages do not mention one. (Corrected 2 October 2026: this previously said zero retention was the default through contracts with LLM providers.)
- Regional data residency considerations apply for international merchants
Plan tiers and pricing (as of early 2026)
| Tier | Price (USD) | AI features | Suitable for |
|---|---|---|---|
| Basic | $39/month | Magic content generation | Sole proprietors |
| Shopify | $105/month | Magic + Sidekick | Small teams |
| Advanced | $399/month | Full AI suite | Growing merchants |
| Plus | $2,300+/month | Enterprise-grade AI + admin | Larger merchants |
Plan detail re-checked against Shopify own pricing page and Shopify Magic documentation on 3 September 2026. The mid tier is now called Grow, not Shopify, at the same $105 a month. Monthly prices above are right, and Shopify also lists annual rates the table did not state: Basic $29, Grow $79, Advanced $299. The more important correction is the AI column. This table implied AI capability rises with the plan – Magic on Basic, Magic plus Sidekick above it, a full suite higher still. Shopify says otherwise: "Shopify Magic tools and experiences are available for free, regardless of your subscription plan", and its pricing page lists Sidekick as included on every tier. You do not need a higher plan to get the AI.
Shopify Payments and transaction fees apply separately to all tiers.
Jurisdiction
- Primary processor: Shopify Inc., Ottawa, Canada (with US, EU, and AU subsidiaries)
- Cloud infrastructure: Google Cloud Platform primarily
- Third-party AI providers: Shopify does not name them or publish their terms (corrected 23 October 2026; this line said they were under no-training contractual terms)
- SOC 2 Type II, PCI-DSS Level 1, ISO 27001 certified
- Subject to Canadian privacy law (PIPEDA), EU GDPR for EU merchants, US state laws for US merchants, NZ Privacy Act 2020 for NZ merchants
Breach history (public incidents)
Briskin v. Shopify Inc. — N.D. Cal. No. 21-cv-06269-PJH, Judge Phyllis J. Hamilton. Two orders in 2026, pointing opposite ways.
Expanded and corrected 26 September 2026. This section previously gave no case name, no case number and no court, and said the litigation traced back to “earlier 2024 proceedings”. It was filed in 2021. Our home page says we record the case number, the court and what is actually pleaded, and on this vendor we were not doing that.
What is pleaded. That Shopify software collects “name, address, email, credit card number, IP address, what you bought, and your geolocation”, and that Shopify “installs cookies on users’ browsers to track their transactions across the entire Shopify merchant network”. The claims are brought under the California Invasion of Privacy Act section 631(a), invasion of privacy, intrusion upon seclusion, the CDAFA and the Unfair Competition Law. The Ninth Circuit, sitting en banc in April 2025, held Shopify could be sued in California and revived the case on jurisdiction; it did not rule on the merits.
21 January 2026 — mostly Shopify’s way. Judge Hamilton granted the motion to dismiss in part and denied it in part, dismissing the CIPA section 631(a), invasion of privacy, intrusion upon seclusion, CDAFA and UCL claims with leave to amend, and the CIPA section 635 claim without leave. Legal commentary at the time read it as a win for Shopify.
30 July 2026 — the amended complaint survives. Briskin amended, and Shopify’s motion to dismiss the amended complaint was denied (docket record read 28 September 2026). Top Class Actions reported that the ruling turned on new allegations that the 2019 order confirmation email came directly from Shopify and carried images hosted on Shopify’s network, and on a theory that Shopify read consumer data while still “in transit”.
How this affects our rating, stated plainly. Our rubric moves a score by 3 points only once litigation has survived a motion to dismiss, and by 1 point where material litigation exists below that line. We apply 3 points. On 26 September 2026 we applied 1, because the 30 July 2026 order then rested on a single secondary report. On 28 September 2026 we read the court’s docket record (GovInfo, USCOURTS-cand-4_21-cv-06269), which records the motion to dismiss the amended complaint as denied on 30 July 2026, and moved to 3. This applies to our 1 to 10 scores, which are not yet published; the rating shown above is unchanged. (Updated 23 October 2026: this paragraph still described the 26 September position.) If you are weighing Shopify, read it as: a live case about how Shopify handles shopper data, which a court has been willing to let continue.
Not AI-specific. The case concerns the Shopify platform rather than Magic or Sidekick. We score it against the AI units because the data at issue is the same merchant and shopper data the AI features operate on.
Sources: Digital Commerce 360 (22 April 2025) on the Ninth Circuit revival; National Law Review and CIPAWorld (23 January 2026) on the 21 January 2026 order, which give the case number as No. 21-CV-06269-PJH, 2026 WL 161441; Top Class Actions (17 August 2026) on the 30 July 2026 order, which is the only source we found for it. All read at source on 26 September 2026. On 26 September we were unable to read the docket directly; we read the docket record on 28 September 2026.
Ongoing 2020-2026 — Shopify third-party app ecosystem breaches (recurring pattern)
The most common breach vector affecting Shopify merchants is the third-party app ecosystem rather than Shopify's own infrastructure. Multiple high-profile incidents (Astrocon, Shopify GPT plugin compromises, malicious theme injections) have affected merchants who installed insufficiently-vetted apps. These are merchant-configuration issues rather than Shopify-platform compromises but are the dominant risk pattern for SMB Shopify users.
Sources: ongoing security research coverage; Shopify Partner Academy security disclosures
September 2020 — Insider data theft incident
Shopify disclosed in September 2020 that two members of its support team had improperly accessed customer transaction data from approximately 200 merchants. The incident pre-dates the AI features but represents the platform-level insider-risk baseline.
No publicly-disclosed Shopify Magic/Sidekick-specific AI security breach as of May 2026.
Ongoing — AI hallucination and merchant complaints
Merchant complaints about Sidekick and Magic hallucinating product specifications, corrupting reference data, and damaging SEO have become a recurring theme in the Shopify Community forums during 2025-2026. Not a security breach but a quality issue that has material business impact for affected merchants. Shopify has acknowledged the broader hallucination challenge industry-wide; product-specific fixes vary in pace.
Source: Shopify Community forums; merchant migration reports (multiple 2025-2026)
Category-level risk: Shopify's Sidekick is an agentic AI with access to merchant store data (orders, customer records, product information). Same prompt-injection class risk applies as for other agentic AI products. The mitigation is the same: keep an eye on Sidekick suggestions, especially for unusual data-access patterns or unexpected automation suggestions.
What this means in plain English for SMB owners
Three honest takeaways:
- Shopify Magic and Sidekick are useful AI features bundled with the platform you're already paying for. The privacy posture is acceptable; no separate per-user AI fees; the no-training default applies. CEO Tobi Lütke's "AI non-optional" memo signals these features will continue to expand.
- Do not publish Magic-generated product data without human review. The hallucination problem is real and merchant-reported. Treat Magic as a drafting assistant, not as an authoritative product-data source. The cost of a hallucinated specification on a published product page is customer-trust damage that takes longer to repair than the AI saved.
- The dominant Shopify-related security risk for SMBs is the third-party app ecosystem, not the AI features. Every app you install gets access to some subset of your store data. Audit installed apps quarterly; remove ones you don't use; vet new app installations against Shopify's Built for Shopify certifications.
Sources
- Shopify privacy and security documentation (shopify.com/legal/privacy, verified 2026-05-24)
- Shopify Trust Center for current certifications
- Shopify Help Center: Shopify Magic documentation (verified 2026-05-24)
- Shopify Help Center: Sidekick AI commerce assistant documentation (verified 2026-05-24)
- Digital Commerce 360: Shopify faces revived California data privacy class action (April 22, 2025)
- Digital Commerce 360: Internal memo Shopify CEO declares AI 'non-optional' (April 8, 2025)
- Shopify Community: Warning Shopify AI Sidekick Magic hallucinates technical data forum post (February 24, 2026)
- Shopify blog: The Future of Artificial Intelligence Impacts and Risks (October 2025)
- General e-commerce platform security analysis
Related on AI Leakage
- Compare all 29 AI tools in the risk directory — see how Shopify Magic / Sidekick stacks up against the rest, tier by tier.
- Take the 5-minute “Am I Leaking?” check — a personalised view of your business’s AI exposure.
- Check a prompt before you paste it — our free Data-Safe Prompt Rewriter.
- Shadow AI vs AI leakage — why even approved tools like Shopify Magic / Sidekick can leak data.
- Get plain-English AI Leakage Alerts — we email you when an AI tool you use changes its data policy or has an incident.
- Get the free AI Acceptable Use Policy template — a plain-English policy with the tool-by-tool risk guide built in.
Compare similar tools: Shopify Magic / Sidekick is one of 2 tools in AI in accounting and online selling compared, which sets out each one’s rating and what it does with your data, side by side.