Buyer questions, answered.

No. Never. Your store's behavioural data trains your store's model only.

Auraflow runs per-store models. Every storefront on the platform gets its own model, trained on its own shoppers. Nothing pools. The patterns that make your researcher different from your impulse buyer come out of your store's data, not blended with a thousand other stores'.

Tenant isolation is enforced on every data path in the application and backstopped by Postgres Row-Level Security on the core tables — defence in depth, so a single missed filter can't leak across stores.

No. Tenant isolation runs on every query path, with database-level Row-Level Security as a backstop.

Five tenant-scoped tables (visitors2, behavioral_signals, merchant_settings, shopify_orders, email_capture_log) carry Postgres RLS policies scoped to the current store. Operator-side cross-tenant access requires an explicit bypass that's logged on every use.

Auraflow is a data processor for your store's first-party data. It's your data, governed by your privacy policy — we never sell it or blend it across stores.

Behavioural signals are classified per-store into an archetype and an intent score. Identifiable data (email, name) is captured only when a shopper opts in through one of your capture surfaces, and it's used for one thing: enriching the profiles in your own Klaviyo or HubSpot. Emails are reduced to a one-way peppered key for cross-device matching, integration secrets are encrypted at rest, PII is masked in logs, and behavioural data is auto-deleted on a published schedule.

It gets deleted on a published schedule. Auth sessions and login codes within 30 days; behavioural signals within 90 days; audit logs retained per GDPR Article 30.

You can also fire an immediate hard-delete from Settings → Data → Delete Account, which removes every visitor profile, every behavioural signal, and every encrypted integration credential associated with your store. The only thing we retain is the GDPR compliance log (proof of the deletion itself).

Yes. We act as a data processor under GDPR and give you the controls to meet your obligations.

Consent management, data deletion and portability, and Shopify's mandatory GDPR webhooks (customer-data-request, customer-redact, shop-redact) are all wired in. Tenant data is isolated per store, integration credentials are encrypted at rest, and PII is masked in logs. See our Privacy Policy, Terms, and DPA.

No. The tracker loads deferred, after first paint, off your page's critical render path — it never blocks rendering or checkout.

It's edge-cached and runs asynchronously once the page is interactive. The signal flush to our servers is fire-and-forget, so there's no blocking call between the shopper and the page rendering.

No. The tracker runs in an isolated scope, and the storefront script is hash-pinned: the browser refuses to run a tampered version.

If our published bytes don't exactly match the hash pinned by Shopify's App Embed, the script is rejected by the browser and your storefront keeps running normally. The same SRI mechanism that defends against Magecart-class attacks defends against any future bug in our own deploy from corrupting your checkout.

No. We don't hold the write_themes scope, and we never write back to your theme.

You enable the Auraflow App Embed yourself in the Shopify theme editor with one click. The Element Picker only modifies in-browser DOM at runtime on your visitors' devices; nothing is written to theme files. Shopify App Store policy prohibits programmatic theme modification, and we don't hold the scope to do it anyway.

Yes. Auraflow's classifier is per-store, so it sharpens with your traffic regardless of volume.

The Starter tier ($49/mo) covers up to 10,000 visitors and ships with the full classifier, all five archetypes, and live server-side classification. The operator chat and MCP server are on Pro and above, but the conversion-driving core (archetype recognition + Smart Capture) is on Starter.

Yes for Shopify Plus (native, one-click). Headless requires a manual script tag (5-minute install).

For Plus merchants, the App Embed flow is identical to standard Shopify. For headless setups (Hydrogen, Next Commerce, custom builds), drop the tracker script into your storefront template; the rest of the integration (Klaviyo, HubSpot, GA4, Meta) works the same.

Yes. Auraflow adds archetype + intent labels to your existing profiles; it doesn't replace your flows.

Two-click OAuth syncs every visitor's archetype to Klaviyo as a profile property and to HubSpot as a contact property. Your existing flows keep running. You can add archetype-conditional branches to them at your own pace, or build new flows triggered on archetype changes.

Under five minutes for Shopify, no developer required.

Install the app from the Shopify App Store, toggle on the App Embed in your theme editor, and the tracker is live. Connect Klaviyo + HubSpot + GA4 + Meta via two-click OAuth from Settings. Your first archetype classifications appear in the dashboard within thirty seconds of installation.

Archetype classifications begin immediately. The CLV and intent models sharpen over the first 7 to 14 days.

Hour 1: live visitor stream + archetype distribution.
Day 1: enough sample for cohort patterns.
Week 1: Smart Capture intervention queue producing actionable nudges.
Month 1: your store's brand-voice profile is fully extracted and every personalised variant ships in your tone.

Auraflow is live customer intelligence for Shopify.

We classify every visitor server-side in under fifty milliseconds, recognise which of five behavioural archetypes they are, and fire the right personalised intervention before they leave. Storefront copy, smart capture, email follow-up: every surface adapts in your brand voice. Per-store models, your data, never pooled across stores.

Researcher, Comparison, Price Checker, Impulse Buyer, and Hesitant.

Researcher reads every spec. Comparison deliberates across variants. Price Checker is price-sensitive and responds to value framing. Impulse Buyer moves fast on high intent. Hesitant shows intent then stalls at the last mile. Every storefront variant, email, and capture is tuned per-archetype, in your brand voice.

Auraflow extracts a structured brand profile from your existing storefront copy, then pre-validates every generated variant against it.

The profile captures your vocabulary, sentence rhythm, words you never use, and tone fingerprint. If a generated variant drifts off-tone, it's rejected from the pool and never shown to a shopper. Your customer sees personalised copy that sounds like you wrote it, because functionally you did. Once.

Smart Capture is the intervention that fires the moment a shopper's intent crosses the threshold.

It knows which product they engaged with, classifies their archetype, and surfaces the right offer: a personalised email capture for the Researcher, a value nudge for the Price Checker, a reassurance for the Hesitant Abandoner. All in your brand voice, server-side, in under fifty milliseconds. No popup library, no "wait, 10% off!"

Yes. The same archetype label flows through Klaviyo, HubSpot, Meta CAPI, and GA4 in lockstep.

A shopper classified as Researcher on the storefront sees Researcher-tuned copy in the abandoned-cart email and Researcher-tuned creative on retargeting. No more researcher on the product page and impulse-buyer in the abandoned-cart email.

Yes. Claude, ChatGPT, Gemini, Kimi, or your own provider. Your key, your model, your bill.

Auraflow orchestrates the call server-side using your key, which is encrypted at rest and never exposed to the browser or to other tenants. We log the action receipts ("segment synced", "task created", "audience built"), never the prompt or response content. Switch providers in one setting; permissions, spend caps, and audit log all carry over.

It means the 150+ Auraflow actions are addressable from Claude Desktop, Cursor, your terminal, or any MCP-aware client. Not just our dashboard.

The Model Context Protocol is the emerging standard for AI agents to call tools across vendor boundaries. If your team already lives in Claude Desktop, you can drive Auraflow from there: "push the high-intent researchers to Klaviyo," "build a GA4 audience of shoppers who bounced after the price page." Your stack composes around Auraflow, not the other way around.

Yes. The Auraflow dashboard does everything the MCP layer does.

MCP is a power-user extension, not a requirement. Every action available through Claude Desktop is also a button (or a sentence in the operator chat) inside the Auraflow web app. Most merchants never touch the MCP server.

No. Four orthogonal guardrails plus a global kill switch govern every AI action.

Access mode (read-only / read-write / full), execution mode (confirm before risky moves vs auto-fire safe ones), categories (which areas the AI can touch), spend caps (daily, monthly, per-call). Anything outbound (emails, list deletes, segment rewrites) always asks for explicit approval, regardless of mode. One operator-only toggle halts every AI action across the platform in under thirty seconds.

$49 / $149 / $399 per month. 21-day trial on every tier. No card charged until day 22.

Starter $49/mo: 10,000 visitors, full classifier, live classification, Klaviyo + HubSpot sync.
Pro $149/mo: unlimited visitors, Adaptive Storefront, Smart Capture, MCP server, 150+ action operator chat.
Agency $399/mo: 10 storefronts, white-label reports, dedicated onboarding.
Annual billing saves 20% on every tier. See /pricing for the full breakdown.

Your monthly fee covers the platform. The only variable cost is your own AI provider bill, which you pay them directly.

There are no AI credits to buy from us, no overage fees on Pro or Agency, and no upsells once you're past the tier price. Starter has a 10,000-visitor cap; above it, you upgrade to Pro or stop being charged for excess visitors (we don't bill overages on Starter). Shopify processes the subscription via standard Shopify billing.

Yes, anytime, from Settings → Plan & Billing.

Downgrade and the new tier takes effect at the next billing cycle. Cancel and your data is retained for 30 days in case you change your mind, then hard-deleted. You can also trigger immediate hard-delete from the same screen.

No. AI predictions are probabilistic estimates, not guarantees.

Archetype classifications, CLV scores, and intent scores sharpen as your store accumulates data. We don't publish a single accuracy figure because individual-visitor accuracy varies materially by store and catalog. They are not appropriate inputs to decisions involving credit, employment, insurance, healthcare, housing, or other regulated uses. Any business decision you make on the basis of an Auraflow output remains your responsibility. See Terms §3.2 and §9.

Vancouver, British Columbia. Kosmatic Solutions Inc. is the company; Auraflow is the product.

We're bootstrapped and patient. We answer to merchants, not investors. See /about for the longer version.