Privacy Policy

Information We Collect

When you create an account, we collect your name, email address, and password (stored as a bcrypt hash). When you connect a store, we store your platform credentials (encrypted at rest) to sync order, product, and customer data on your behalf. Conversations between your customers and the AI agent are stored to provide the service.

Shopify store data:

• Order data — order numbers, statuses, tracking info, customer emails
• Product data — titles, descriptions, prices, inventory levels, images
• Customer email addresses — used to match conversations to orders

How We Use It

We use your data solely to operate and deliver AiKon — powering AI conversations, syncing store data, generating analytics, and sending transactional emails.

We do NOT:

• Sell or share merchant or customer data with third parties
• Use store data to train AI models
• Access payment card data (PCI DSS out of scope)
• Modify your products, inventory, or store settings

Data Storage & Security

• All credentials encrypted with AES-256-GCM (never stored in plaintext)
• Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Passwords hashed with bcrypt
• Tenant-level data isolation — each store's data is completely separated
• Role-based access control (Owner, Admin, Agent roles)
• Audit logging for all data access and administrative actions
• Infrastructure hosted on SOC 2 compliant cloud providers

Data Retention & Deletion

When you uninstall AiKon from your Shopify store, we immediately deactivate the store connection and cancel billing. Full data erasure — including all conversations, synced orders, products, knowledge base documents, and user accounts — occurs automatically via Shopify's shop/redact webhook within 48 hours.

You can also request data deletion at any time by contacting our support team.

GDPR Compliance

We comply with GDPR and respond to all mandatory Shopify data privacy webhooks:

• Customer data request — We report all data held for a given customer upon request
• Customer data erasure — Customer PII is anonymized across all conversations and order records
• Shop data erasure — All tenant data is permanently deleted after app uninstall

Your Rights

Under GDPR and applicable data protection laws, you have the right to access, correct, export, or delete your personal data at any time. You can manage most of this directly from your AiKon dashboard. For account deletion or data export requests, contact our support team. We respond within 30 days.

Third-Party Services

We integrate with Shopify, WooCommerce, Anthropic (AI), OpenAI (AI), SendGrid (email), and Stripe (payments). Each service has its own privacy policy governing data they process on our behalf.

Contact

Questions about this privacy policy or your data? Email us at privacy@aikon-chat.com.