Privacy Policy

Chat Squeeze ("we", "us") provides an AI shopping assistant for Shopify stores. This policy explains what personal information we collect, how we use it, and the rights available to you.

Our role. For merchant account data, we are the data controller. For shopper data collected through the chat widget, the merchant is the controller and we act as a processor, handling that data only to provide the Service. A Data Processing Addendum is available at support@chatsqueeze.com.

Information We Collect

From your Shopify store

We collect read-only product catalog, store content and policy pages, store language, and theme settings. This information is used to power the assistant's answers. Order status details are retrieved only when a shopper asks about their own order, after verifying the order number and email match, and are shown in the chat only. They are never stored by us.

From merchants

• Account details, including name, email, and store domain
• Bot settings
• Support communications

Billing is handled entirely by Shopify. We never see payment card details.

From shoppers

• Chat messages, including relevant page and cart context needed to answer
• A random visitor identifier for conversation continuity
• Contact details a shopper voluntarily submits through the in-chat form
• Which products were opened from the chat so the merchant can measure the assistant's contribution to sales
• IP addresses, used transiently for security and abuse prevention only

We do not knowingly collect data from children under 16, and shoppers should not enter sensitive information, such as health, financial, or government ID information, into the chat.

Cookies and Consent

The widget uses first-party cookies and local storage only, for conversation continuity for 60 days and sales attribution for 60 days. No third-party tracking pixels or advertising tags are ever placed on your storefront. Nothing is stored before a shopper chooses to open the chat, and the chat displays a clear notice that by chatting the shopper agrees to this policy. Where a store's cookie banner records a decline, the widget honors it and runs without persistent identifiers.

How We Use Information

We use information to provide the Service, including generating AI replies, keeping conversations continuous, showing merchants their transcripts, leads, and sales analytics, and operating and securing our platform.

We never:

• Sell or share personal information
• Use shopper data for advertising or profiling
• Allow chat content, leads, or store data to be used to train AI models

Under the CCPA/CPRA we act as a Service Provider.

Sharing

We share data only with the vendors needed to run the Service, under data-protection agreements:

• OpenAI for AI reply generation in the US, contractually barred from training on our data
• Supabase for database hosting in the EU
• Resend for transactional email in the US
• Shopify for platform and billing
• Microsoft Clarity for analytics on our merchant dashboard only, never on your storefront

We may also disclose information where required by law, or as part of a merger or acquisition, subject to this policy.

Data Retention

• Chat conversations: Deleted 365 days after last activity, automatically
• Visitor and attribution identifiers: Expire after 60 days
• Order lookups: Never stored
• Leads: Retained until the merchant deletes them or closes their account
• Merchant data and store content: Deleted when you uninstall the App

International Transfers

Our database is hosted in the EU. AI processing and email delivery take place in the US, covered by Standard Contractual Clauses and encryption in transit and at rest.

Security

Data is encrypted in transit and at rest, access is restricted and logged, and we maintain an incident response process. Affected merchants are notified of any personal data breach without undue delay, and within 72 hours of confirmation.

Shopify Compliance

We implement all mandatory Shopify privacy webhooks with automated handling: customer data requests are compiled and delivered to the merchant; customer deletion requests remove all related records; uninstalling the App permanently deletes all store data, including data held with our AI provider.

Your Rights

Depending on your location, including GDPR, UK GDPR, CCPA/CPRA, and Israel's Privacy Protection Law, you may have the right to access, correct, delete, or port your personal information.

Shoppers should contact the store they chatted with first, because the store is the controller. We will assist them, or route requests sent to us. Merchants can manage their data from the dashboard or contact us. No one is ever discriminated against for exercising a right.

Changes and Contact

We may update this policy from time to time; material changes are notified by email or in-app. Questions or requests:

support@chatsqueeze.com

Chat Squeeze
https://www.chatsqueeze.com