Privacy Policy: Answero for Shopify

From the merchant, through Shopify (with the permissions granted at install):

• Store details: store name, contact email, domain, currency, time zone, and brand logo and colours.
• Published products and variants, including prices, availability, descriptions and images.
• Collections, online store pages and blog posts.
• Store policies, such as refund, shipping and privacy.

We do not access the store's customer records, orders or payment information.

The settings you choose (such as chat colours, welcome message and retention period), any text or files you add as extra knowledge, and your plan. Billing is handled by Shopify; we receive the plan you chose and its status, never card details.

The questions a shopper types, the answers they receive, and the time of each message. Shoppers are not asked to sign in. If a shopper types an email address, phone number or other personal details into the chat, these are stored as part of the conversation.

Browser storage: the chat saves a random identifier in the shopper's browser local storage so a conversation can continue on later visits. It is not used for advertising or to track shoppers across other sites. Merchants may list it in their own cookie notice as a strictly necessary item.

• To answer shoppers' questions accurately from the store's own content. The app indexes that content and looks up the relevant parts when a question is asked.
• To show merchants their conversations, usage and settings inside Shopify admin.
• To operate, secure and support the service, and to send merchants service notices.

We do not use store data or shoppers' messages to train or fine-tune AI models, ours or anyone else's. We do not sell, rent or share personal information for advertising.

We process merchant data to perform our contract with the merchant, and for our legitimate interests in securing and improving the service. We process shopper conversations on the merchant's instructions, under the merchant's own legal basis.

We share data only with providers that help us run the service, and only for that purpose.

• Shopify: the platform the app runs on; supplies store data and handles billing.
• OpenAI: generates the assistant's answers and indexes store content.
• Amazon Web Services: application hosting and file storage.
• MongoDB Atlas: database.
• Email delivery provider: sends service emails to merchants.

OpenAI is used through its business API, under terms that do not allow our data to be used to train its models. A current list of subprocessors is available on request at support@answero.urdux.tech. We may also disclose information where the law requires it.

Application servers and file storage are on Amazon Web Services in Stockholm, Sweden. The database is on MongoDB Atlas in the United States. Our providers may process data in other countries. UrduX is based in Pakistan.

When personal data from the EU, EEA, UK or Switzerland is transferred to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or our providers' equivalent safeguards.

• While the app is installed: store content is refreshed from Shopify as the store changes. Conversations are kept until the merchant deletes them or the app is uninstalled. In the app's Settings, merchants can export their conversations, delete all of them, or delete those older than a period they choose.
• When the app is uninstalled: the chat stops on the store immediately, and we delete all of that store's data within 30 days, or sooner when Shopify sends its store-erasure request.
• Shopify privacy requests: when Shopify tells us a shopper has asked for their data to be provided or erased, we search that store's conversations for the shopper's email address or phone number, and provide or erase what we find. We complete these requests within 30 days.

If the merchant linked the store to an existing Answero account, only that store's data is deleted; the rest of the account stays under our general policy.

Merchants can export and delete their data in the app's Settings. Depending on where they live, merchants and shoppers may have the right to access, correct, delete or port their personal data, and to object to or restrict its processing. Write to us at the address below. For shoppers, the store they chatted with is the first point of contact, and we help the store respond. We answer within the time the law requires, and you may complain to your local data protection authority.

Requests between Shopify, the app and our servers are signed and verified, data travels over encrypted connections, and each merchant can access only their own store's data. No system is perfectly secure, so we cannot guarantee absolute security.

The app is not directed at children under 16, and we do not knowingly collect their personal data.

If we change this policy, we will post the new version here with a new effective date. For material changes, we will notify merchants in the app or by email.

UrduX (SMC-Private) Limited, Chaklala Scheme 3, Rawalpindi, Pakistan. Email: support@answero.urdux.tech.