Privacy policy

What the Product Assistant collects, what it never has, and how everything is erased.

What we receive from your store

With your permission, the app reads, read-only:

• your products: titles, descriptions, prices, variants, options, metafields;
• your store policies: returns, delivery, terms.

The public pages of your website (delivery, returns, payment, size guide) are read the way any visitor would read them, with no access permission whatsoever.

What we do not have

We receive no name, no email address, no phone number, no postal address and no payment method. We do not access your customer records or your order details.

In Shopify's classification our usage is level 1 protected customer data: never level 2, which covers precisely the identity fields listed above.

Your store's visitors

To measure the assistant's impact, a technical identifier is stored in the visitor's browser. It contains no name and no email address, but it does link several visits together: it is therefore pseudonymous data, and as such personal data under the GDPR. We do not present it as anonymous.

Its only purpose is to know whether a visitor who used the assistant went on to place an order. Associated with that identifier: the timestamp, the message shown or the question asked, the amount and the order number.

The order counter is a Shopify pixel. Since 10 December 2025, Shopify replaces identity fields with an empty value in the data sent to apps not approved for those fields. Our measurement works without them, by design.

Conversations

Questions asked to the assistant are sent to our language-model provider to produce the answer, along with the information from your store needed for that answer. No customer record is attached. If a visitor writes an email address or a phone number into their own question, it is replaced before anything is stored.

Retention and erasure

Your store's data is kept for as long as the app is installed. Visitor-related data has a limited lifetime, set by what it is actually used for:

• 13 months for the identifier stored in the browser · beyond that a new identifier is created and the old one can no longer be linked to anything;
• 25 months at most for the associated events · beyond that they are erased automatically.

Both periods are written into the data processing agreement. Everything is also erased when:

• you uninstall the app;
• Shopify sends us a shop deletion request;
• Shopify sends us a customer request: the events tied to their orders are erased.

Erasure covers all retained data, including what is loaded in memory. It is verified by an automated test suite that replays Shopify's three requests and checks that nothing is left.

Your rights

You may at any time request access to your data, its correction or its deletion, by writing to support@bouclr.com.