Privacy policy

Who we are

Shoplite is operated by Zitrino LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States. You can reach us at [email protected] for anything in this policy.

Our role depends on whose data it is. For merchant account data we are the controller. For shopper conversations happening on a merchant's storefront, the merchant is the controller and we act as their processor - we handle that data on their instructions, not our own.

What we collect from merchants

When you install from the Shopify App Store we receive your shop domain, the email on the Shopify account, and an offline access token scoped to the four read permissions listed in our documentation. Your account is created from that callback; we never ask you to set a password with us.

Billing is handled by Shopify. We see your plan and its status. We never receive your card details.

What we read from your store

The agent reads products, orders, customers and themes - all read-only. It cannot alter your catalogue, your orders or your theme files.

Product and order data is read live at the moment a shopper asks, not copied into a separate store. That is a privacy property as much as an accuracy one: there is no second warehouse of your catalogue to leak.

What we collect from shoppers

Message content, a session identifier, detected language, coarse device and referral information, and the outcome of the conversation. Where a shopper is signed in to the store, Shopify passes us a customer identifier through the App Proxy so the conversation can be tied to their real orders.

Each shopper turn is also stored as a structured event - the intent behind it, whether the shop could answer, and whether it led to a cart. This is what powers the merchant's analytics.

We do not ask shoppers for information the agent does not need, and we do not build advertising profiles or sell anything to anyone.

AI processing and subprocessors

Answering a question means sending the relevant conversation and the retrieved store context to a large language model provider. Anthropic is our default; OpenAI is available as an alternative. Providers are selected per shop from a controlled list.

We use providers under terms that prohibit training their models on data we send. A current subprocessor list is on the GDPR page, and we will tell you before adding a new one.

How long we keep it

Conversation transcripts and the events derived from them are retained for the life of the shop's account so the merchant's analytics remain meaningful, then deleted on request or on uninstall. Aggregated counts that cannot identify a person may be kept longer.

When a shop uninstalls, Shopify sends us a shop redaction request and we delete the shop's data on the schedule set out on the GDPR page.

Security

Platform credentials are encrypted at rest. Webhook deliveries are verified against the raw request body before we act on them, and App Proxy requests are signature-checked, so a forged request cannot reach your data. Dashboard sessions use signed, HTTP-only cookies.

No system is perfect. If a breach affects your data we will tell you and the relevant regulator within the timeframes the law requires.

Sharing

We share data with the subprocessors needed to run the service, and with nobody else - except where a law or a valid legal order compels it, or to protect someone's safety. We do not sell personal data.

If Shoplite is ever acquired, this policy travels with the data and you will be told before anything changes.

Your rights

Depending on where you live you may have rights to access, correct, export, delete or restrict processing of your personal data, and to object to it.

Merchants can exercise these directly with us. Shoppers should contact the store they were talking to, since that merchant is the controller - we will support them in answering. The GDPR page explains the mechanics.

Cookies and local storage

The storefront widget keeps a session identifier in the shopper's browser so a conversation survives a page navigation. The dashboard stores a session cookie and your interface preferences. We run no advertising or cross-site tracking cookies.

Children

Shoplite is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, write to us and we will remove it.

Changes to this policy

We will post material changes here with a new date, and email merchants where the change affects how their shoppers' data is handled. Continuing to use Shoplite after a change means you accept it.