Privacy Policy

1. Overview

This Privacy Policy explains how ShopBrain: AI Agent & Chatbot ("we", "us", or "our") handles personal information when Shopify merchants install or use our application and when shoppers interact with the AI assistant on a merchant's storefront.

Merchants are responsible for informing their customers about their own privacy practices. For shopper information processed through the app on a merchant's behalf, the merchant is the controller of that information and we act as its service provider or processor.

2. Information we collect

Merchant and store information

We may receive the merchant's name, email address, Shopify store domain, store details, installation status, app configuration, and authentication information required to connect the app to Shopify.

Conversation information

We process messages shoppers submit to the AI assistant, AI-generated replies, product-related context, and basic technical details needed to deliver and improve the chat experience.

Configuration and service information

We store assistant branding, appearance settings, greeting text, and service preferences. If a merchant chooses to use their own AI provider key, the key is encrypted before storage.

Technical information

We may collect IP addresses, browser and device details, timestamps, request logs, and diagnostic information for security, reliability, and troubleshooting.

3. How we use information

• Provide, operate, maintain, and personalize the AI shopping assistant.
• Generate relevant answers and product recommendations.
• Authenticate merchants and connect the app with Shopify.
• Display usage statistics and conversation activity to merchants.
• Respond to support requests and service communications.
• Detect abuse, prevent fraud, troubleshoot errors, and protect the service.
• Meet legal obligations and enforce our agreements.

4. How we share information

We do not sell personal information. We share information only as needed to operate the service, including with Shopify, hosting and infrastructure providers, email providers, and the selected AI provider used to generate assistant responses.

These providers may process information only to perform services for us and are subject to appropriate contractual or legal obligations. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer such as a merger or acquisition.

5. Data retention

We retain information only for as long as necessary to provide the service, satisfy legal and accounting requirements, resolve disputes, and protect the platform. When a merchant uninstalls the app, we delete or anonymize store-related personal information within a reasonable period unless retention is legally required.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of your personal information, or object to certain processing. Shoppers should normally submit requests to the Shopify merchant whose storefront they used. Merchants may contact us using the details below.

You may uninstall the app through Shopify at any time. Uninstalling stops future store access, subject to information we must retain for legal or security reasons.

7. International data transfers

Our service providers may process information in countries other than the country where it was collected. Where required, we use appropriate safeguards for international transfers of personal information.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. No internet-based system is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

The app is intended for businesses and is not directed to children. We do not knowingly collect personal information from children under the age required for consent in their jurisdiction.

10. Changes to this policy

We may update this policy to reflect changes to our service, practices, or legal obligations. We will post the updated policy on this page and revise the "Last updated" date.