Privacy

Privacy Policy

Last updated: October 2026

1. Overview & Commitment

At CartSense AI Copilot ("we," "our," or "the App"), we respect the privacy of merchants and end-user shoppers. This Privacy Policy outlines what information we collect, how it is processed to deliver AI shopping assistance, and how we ensure strict compliance with Shopify's partner requirements, GDPR, and CCPA standards.

2. Data We Collect & Access

To deliver real-time AI tool-calling and cart monitoring, the App requests scoped permissions via Shopify OAuth:

  • Store Catalog Data: Product titles, descriptions, pricing, inventory availability, and image URLs to provide accurate search recommendations.
  • Cart & Session Identifiers: Ephemeral cart tokens and item lists to calculate discount thresholds and display cart summaries in the AI chat.
  • Order Status (Lookup Only): Order fulfillment numbers and shipment status, queried only on-demand when a customer explicitly asks the AI assistant.
  • Store Configuration: Selected Peek mascot, greeting messages, and accent colors configured in the Merchant Admin.

3. What We DO NOT Collect or Store

We adhere to privacy-by-design principles:

  • We do not store customer payment details, credit cards, or CVVs. All transactions take place securely through Shopify's checkout.
  • We do not sell merchant data, shopper emails, or browsing habits to any third-party advertisers or data brokers.
  • Customer chat conversations are processed transiently in memory to generate LLM completions and are not permanently used to train public foundation models.

4. Shopify Mandatory Compliance Webhooks

In strict compliance with Shopify App Store requirements, the App implements and listens to all mandatory customer privacy webhooks:

  • Customer Data Request (`customers/data_request`): If a customer requests a copy of their store data via Shopify, we retrieve any associated temporary chat logs upon verified request.
  • Customer Data Erasure (`customers/redact`): When a customer requests data erasure under GDPR/CCPA, all identifiable session and cart references are erased from our database within 48 hours.
  • Shop Redact (`shop/redact`): 48 hours after a merchant uninstalls the App, all associated store records, bot configurations, and history logs are permanently purged.

5. Cookies & Local Storage

The storefront widget uses lightweight `localStorage` on the customer's browser strictly to remember the position of the draggable floating pill and maintain the active conversation thread during a single shopping session.

6. Contact Our Data Protection Officer

For privacy inquiries, GDPR data deletion requests, or questions regarding data processing, please contact us at [email protected].