SalesBot AI

SalesBot AI for Shopify

Privacy policy

SalesBot AI adds a shopping assistant chat to Shopify stores. This page explains what data the app handles, why, where it goes and how long it is kept.

Last updated: · Türkçe

Chat messagesKept 30 days, then deleted
Chat activityUp to 60 days after the last message
Visitor ID cookie60 days, only after a shopper sends a message
Selling your dataNever. No ads or tracking tools in the chat.

Who is responsible

For shopper data collected through the chat on a store, the merchant who installed SalesBot AI decides how it is used and SalesBot AI processes it on the merchant's behalf. Shoppers who want to exercise their privacy rights should contact the store; the store can reach us through the support page.

For merchant account data (the store's app settings, billing and support requests) SalesBot AI is responsible.

Data we receive about the store

  • Store details from Shopify: store address (myshopify domain), name, currency, primary domain, country, time zone and Shopify plan name. We use them to run the app, apply plan limits and convert sales amounts.
  • Store contact details from Shopify: store email, contact email and owner name. Stored encrypted and used only for support and account notices about the app.
  • Shopify access tokens: stored encrypted (AES-256-GCM) and used only to call Shopify on behalf of the store.
  • Product catalog of products published to the Online Store (title, description, type, vendor, tags, prices, variants, availability and image address) and the store's published policies (for example refund and shipping). The chat answers from these.
  • App settings the merchant chooses (bot name, greeting, color, language, discount code if allowed).
  • Billing records: plan, Shopify subscription status, and for orders counted by the app: order ID and number, amounts, currency, discount code used, which rule counted the order and the commission charged.

Data handled when shoppers use the chat

  • Chat messages typed by the shopper and the replies. Shoppers may type personal information into the chat; we do not ask for it. Messages are stored encrypted, kept 30 days and then deleted. While they are kept, the store can read these conversations in the app's admin (Conversations page).
  • Chat activity: a random session ID, language, time of messages, products shown and buttons used (for example Add to cart). Kept up to 60 days after the last message. Single events (event name, session ID, product ID) are kept up to 180 days. Daily totals contain no personal data.
  • A random visitor ID, created only after the shopper sends a message, stored in a first-party cookie named salesbot_vid and in the browser's local storage for 60 days. It lets the store count a later order from the same device within 30 days of the chat. If the store's Shopify customer privacy settings do not allow analytics processing, the ID is kept only for that visit.
  • Two cart attributes (_salesbot_session and _salesbot_visitor) are added to the shopper's cart, so they also appear on the order in the store admin.
  • If the shopper is logged in to the store, Shopify passes the customer ID to the app. We store only a keyed hash of it, used to match orders from the same customer account within 30 days of a chat. We do not store customer names, email addresses, phone numbers or postal addresses. Order data is requested from Shopify without these fields.
  • IP addresses are not stored. A keyed hash of the IP address is used to limit abuse and is deleted after 2 days.

AI processing

To write a reply, the shopper's message, the recent conversation, the store name and currency, and relevant products and policies are sent to Anthropic (Claude API). The app does not attach the shopper's account details (such as name or email) to these requests; text the shopper types is sent as written.

Replies are generated only to answer the shopper in that conversation.

Service providers

  • Anthropic PBC (United States): generates chat replies.
  • DigitalOcean (United States, New York data center): hosts the app server and database.
  • Cloudflare: provides DNS for the app address only; app traffic does not pass through it.
  • Shopify: the platform the app runs on, including billing through Shopify.
  • We do not sell or rent data, and the chat does not load advertising or third-party analytics tools on the storefront.

Deletion and retention

  • When the app is uninstalled, Shopify access tokens are deleted right away. About 48 hours later Shopify asks us to erase the store's data and we delete it, except a minimal record (store address, install and uninstall dates, last plan and totals of counted orders and commission) kept for billing and accounting.
  • When Shopify forwards a shopper's erasure request, we delete the chat messages linked to the listed orders and the stored customer hash. For data requests we hold no customer names, emails or addresses.
  • Backups of the database are taken nightly on the same server and kept 14 days, so deleted data is fully removed within 14 days.
  • Server logs record store address, error codes and hashed identifiers, never chat text. They are rotated by size.
  • Support requests (email, store address and message) are kept 180 days.

Security

Traffic uses HTTPS. Access tokens, store contact details and chat messages are encrypted at rest (AES-256-GCM). The app runs as its own isolated service user and asks Shopify only for read access to products, orders and store policies.

Contact and changes

Questions or requests: use the support page. We will update the date at the top when this policy changes.