Privacy Policy

We collect the following categories of information:

• Account information. When you sign in with Google, we receive your name, email address, and profile image from the OAuth provider. We do not receive your Google password.
• Service usage data. Stores, products, watchlists, search queries, conversation history, bookmarks, and interaction events (such as viewing a product or opening a checkout link) you create or trigger inside the Service. Your raw chat input is stored privately and visible only to you. When the AI generates an internal search query from your input, that query may be displayed anonymously on the Service (e.g., as a recent-search feed) without any link to your account or identity.
• Observational data. Public commerce catalog data we collect about products, stores, prices, and how AI agents respond to queries. This data is not associated with individual end-shoppers.
• Technical data. Standard server logs (IP address, user-agent, referrer, timestamps), error reports, and minimal performance metrics required to operate and secure the Service.
• Cookies and similar technologies. Cookies used to keep you signed in, remember preferences, and protect against abuse. We do not use third-party advertising cookies.

We use the information described above to:

• Provide, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Generate dashboards, summaries, and AI-assisted analysis.
• Communicate service updates, security alerts, and (if you opt in) notifications about monitored stores or products.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

As the operator of the Service, we may access stored data — including conversation logs and search queries — for the purposes listed above (e.g., debugging, abuse investigation, or service improvement). We do not access your conversations for purposes unrelated to operating the Service.

Some features of the Service use large language models accessed through third-party AI providers, routed through Cloudflare AI Gateway. When you use those features, your queries and relevant context are transmitted to the selected provider to generate a response. The specific model and provider may change over time as we tune for quality, latency, and cost. We do not allow these providers to use your inputs to train their models where their terms permit such an option. Do not submit information you do not want processed by an AI provider.

AI models may generate evaluation text explaining why a product was selected or not selected in response to a query. These evaluations are derived from publicly available catalog data and query context, not from personal information. Aggregated or anonymized evaluation content may appear on publicly accessible pages of the Service.

We do not sell your personal information. We share information only as described below:

• Service providers. Infrastructure and AI Gateway (Cloudflare), identity (Google), third-party AI providers, and other vendors that process data on our behalf under contractual confidentiality and security obligations.
• Data sources. Public commerce catalogs (such as those exposed via Shopify Catalog MCP) from which we retrieve product and store data.
• Public analytics pages. Aggregated, anonymized analytics about stores and products observed by the Service (such as how often a product appears in AI searches and its selection rate) are displayed publicly on the Service. This data is derived from public catalog sources and does not include personal information.
• Aggregated data recipients. We may share or license aggregated, anonymized data — such as category trends, product appearance statistics, and AI selection patterns — with third parties for research, analytics, or commercial purposes. This data does not identify individual users.
• Legal and safety. When required by law, legal process, or to protect the rights, safety, or property of us, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality terms.

We retain account and usage data for as long as your account is active or as needed to provide the Service. Aggregated, anonymized data may be retained for analytics and product improvement. You may request deletion of your account and associated personal data as described in Section 7.

We use industry-standard safeguards (including encryption in transit, access controls, and isolated cloud infrastructure) to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. You can manage basic profile information from your account settings, or contact us to exercise other rights. We will respond within the time period required by applicable law.

The Service is operated on globally distributed infrastructure. Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes will be communicated through the Service or by other reasonable means.

For privacy questions or to exercise your rights, please reach us through the contact channels provided on our site. See our Terms of Service for the terms governing your use of the Service.