Privacy Policy

1. Data We Access from Your Shopify Store

When you install Talkstore, we request the following Shopify API scopes:

• Products (read and write): to score, enrich, and update your product titles, descriptions, metafields, and alt text.
• Themes (read only): to understand your store's theme structure for context during product enrichment.
• Orders and analytics (read only): to provide revenue, sales, and inventory insights.
• Product listings (read only): to assess product data readiness for external sales channels.

We do not access customer personal information, payment data, or financial account details.

2. Data We Store

Talkstore stores the following data in a PostgreSQL database hosted on Supabase (US West region):

• Store identity: your store's Shopify domain and installation status.
• Conversation history: messages exchanged between you and the Talkstore agent within the app.
• Audit logs: before-and-after snapshots of every product change made through Talkstore, enabling one-click undo.
• Task usage records: a count of billable actions performed, linked to your billing plan.
• Merchant settings: your preferences configured within the app.

We do not store your customers' names, email addresses, shipping addresses, or any other personally identifiable information. Commerce Intelligence queries return aggregated order statistics only.

3. Third-Party Data Processing

Talkstore sends product data and conversation messages to Anthropic's Claude API for AI processing. This includes product titles, descriptions, metafield values, and product image URLs. Anthropic processes this data according to their usage policy and does not use API inputs for model training.

No customer personal information is sent to Anthropic. A PII guard strips any customer names or emails from data before it reaches the AI.

4. Data Retention

Conversation history and audit logs are retained for the duration of your installation. Task usage records are retained for billing purposes.

5. Data Deletion

You can request deletion of all your data at any time by uninstalling the app or contacting us. When you uninstall Talkstore:

• All session data is deleted immediately.
• Your shop record is marked inactive.

We also support Shopify's mandatory GDPR webhooks:

• Customer data erasure (customers/redact): anonymizes any message content associated with the requesting shop.
• Shop data erasure (shop/redact): permanently deletes all data associated with your shop, including conversations, messages, audit logs, task usage records, and the shop record itself.

6. Data Security

All data is transmitted over HTTPS. Our database is hosted on Supabase with encryption at rest. Access tokens are stored securely and never logged or exposed in conversation history.

7. Cookies

Talkstore does not set cookies. Authentication is handled through Shopify's session token mechanism.

8. Changes to This Policy

We may update this policy as we add features. Changes will be posted at this URL with an updated date.

9. Contact

For questions about your data or to request deletion, contact us at support@talkstore.ai.