Privacy Policy
Last updated: 18 July 2026
shoppingmate (“we”, “our”) provides an on-site shopping assistant that merchants install on their store. This policy explains what data the app accesses, why, and how it is handled.
What we access (and why)
| Data | Source | Purpose |
|---|---|---|
| Product catalog (titles, prices, variants, images) | Shopify Admin API (read_products) + your public /products.json | So the assistant can answer questions and recommend accurately |
Orders (totals, line items, note_attributes) | Shopify Admin API (read_orders) + orders/create webhook | To attribute assisted conversions and report lift to you |
| Store domains + shop profile | Shopify Admin API | To scope the assistant to your storefront and keep the catalog in sync |
| Anonymous visitor interactions | The storefront widget | To power the conversation and measure conversion; keyed by an anonymous visitor id, not a Shopify customer identity |
We do not request read_customers, we do not sell data, and cart/checkout run in the shopper’s own browser session (Shopify owns payment — we never see or store payment details).
Store analytics (Insights, Growth & Scale plans)
When a merchant on Growth or Scale turns on Store Insights, our script measures how shoppers use the store so the merchant can fix what isn’t working:
- We record page-level summaries only: which kind of page was viewed, how far people scrolled, which buttons were tapped, page speed, and whether a step (cart, checkout) was reached. Clicks are counted in aggregate; we do not record mouse movements or screen video.
- We nevercapture what shoppers type — form fields are noted by name only (e.g. “pincode”), never their contents. Password fields are ignored.
- Measurement respects consent: it stays off when the store’s consent banner (Shopify Customer Privacy, OneTrust, Cookiebot) declines analytics or the browser sends Global Privacy Control, and for visitors in the UK/EU it only runs after an explicit yes.
- Aggregated counts are kept for up to 12 months; the small number of detailed page records we keep (for example when a shopper chatted with the assistant) are deleted after 7–14 days. IP addresses are not stored with this data.
Storage & retention
- Data is stored on our infrastructure (Railway/Vercel; US region) and encrypted in transit (TLS).
- Conversation/voice recordings, where enabled, are retained for a limited QA window and then deleted.
- On uninstall we stop processing; on
shop/redact(48h after uninstall) we erase the shop’s data.
GDPR / privacy compliance
We implement Shopify’s mandatory compliance webhooks:
customers/data_request— we acknowledge; the app stores no customer PII.customers/redact— no Shopify-customer-identified data is retained to erase.shop/redact— we delete the shop’s stored data.
Sub-processors
Shopify, Railway, Vercel, and the AI model providers used to generate responses (text + voice). Each processes data only to deliver the service.
Your rights & contact
Merchants and their customers may request access or deletion of data we hold. Contact hello@shoppingmate.shop. We respond within 30 days.