How Sugesta handles merchant, store, catalog, and shopper interaction data.

1. Who We Are

Sugesta provides an AI shopping assistant for ecommerce stores. The product connects to storefront platforms such as Shopify, syncs product information, and helps shoppers ask questions, compare products, and make buying decisions.

2. Information We Collect from Merchants

We collect merchant information needed to create accounts, connect stores, and operate the dashboard.

• account and profile information used to create and manage merchant access
• Shopify store identity, shop domain, store configuration, and installation state
• Shopify billing channel, plan, subscription status, and entitlement state for Shopify merchants
• optional contact email and verification status when a merchant chooses to add one
• support, account, setup, and operational communications

3. Information Collected from Shopify Stores

When a merchant connects a Shopify store, Sugesta uses Shopify OAuth and approved scopes to access the data needed to run the app.

• product and catalog data such as titles, descriptions, collections, tags, variants, images, prices, and availability
• storefront page context needed to operate the assistant widget
• cart context when the storefront widget provides it to answer cart-stage questions
• store setup, sync, runtime, and diagnostics information used to keep the integration working

Sugesta does not intentionally collect payment card data. Sugesta does not intentionally collect order history or customer account data unless a future feature requires approved Shopify scopes and an updated review of the data use.

4. Shopper Interaction Data

The storefront widget processes shopper interaction data so the assistant can answer questions and keep the conversation useful.

• shopper questions and chat messages sent to the assistant
• assistant responses, suggested products, sources, follow-up actions, and conversation continuity data
• product clicks, assistant actions, and widget behavior events used for merchant analytics and troubleshooting
• technical identifiers such as browser/session identifiers needed to operate the widget and reduce abuse

5. How We Use Data

We use collected data to:

• provide assistant answers, product recommendations, and product comparisons
• operate the storefront widget and preserve conversation continuity
• sync catalogs and diagnose setup, runtime, and integration issues
• manage billing, plan entitlements, usage limits, and Shopify subscription status
• protect the service, reduce abuse, troubleshoot issues, and provide merchant analytics

6. AI Processing

Shopper questions and relevant store, catalog, page, cart, or conversation context may be sent to AI service providers to generate assistant responses. We aim to minimize personal data in prompts where practical. We do not send payment card data to AI providers.

7. Data Sharing

We do not sell merchant or shopper personal data. We may share data with service providers and platforms only as needed to operate Sugesta.

• Shopify, for app installation, OAuth, app proxy runtime, billing, and platform workflows
• infrastructure and hosting providers used to run the API, dashboard, database, logs, and assets
• Resend, for optional merchant contact email verification and service notifications
• AI service providers, for response generation using relevant shopper and store context
• legal, safety, or security recipients when required by law or needed to protect the service

For Shopify merchants, required paid app charges are handled through Shopify Billing. Sugesta does not route Shopify-origin merchants to an external checkout for required app payment.

8. Data Retention

We retain merchant, store, catalog, chat, usage, and diagnostic data while the merchant account or connected store remains active. We may retain logs, billing records, security records, and operational records for limited periods where needed for troubleshooting, abuse prevention, accounting, legal, or compliance purposes.

When a store is disconnected, the app is uninstalled, or a deletion request is received, we delete or anonymize data where required, subject to legitimate operational, legal, or security retention needs.

9. Merchant Controls

Merchants can control Sugesta data and behavior in several ways:

• disable the storefront widget
• disconnect a store or uninstall the Shopify app
• update or verify a contact email
• request data access, export, correction, or deletion
• manage team access and store configuration in the dashboard

10. Shopify Uninstall and Privacy Requests

Sugesta handles Shopify uninstall events and responds to privacy and data requests according to Shopify requirements. Merchants or shoppers may also send privacy requests to [email protected]. We may need information that verifies the store, account, or request context before completing a request.

11. Security

Sugesta uses HTTPS for data in transit, access controls for merchant dashboard access, and rate limiting and abuse-protection controls for public and sensitive routes. We do not claim SOC 2, ISO, GDPR, or similar certification unless separately stated in a signed agreement or current public certification notice.

12. International Users

Sugesta may process data in countries where we or our service providers operate. By using Sugesta, merchants understand that data may be processed outside their country of residence, subject to applicable law and provider safeguards.

13. Children

Sugesta is intended for ecommerce merchants and storefront shoppers. It is not directed to children, and merchants should not use Sugesta to intentionally collect data from children.

14. Changes to This Policy

We may update this Privacy Policy as Sugesta changes. The current version will be posted at this URL with an updated date.

15. Contact

For privacy requests, contact [email protected]. For product or support questions, contact [email protected].