Privacy Policy

Tuki: AI Sales Agent Chatbot ("Tuki", "we", "us") is a Shopify app provided by Tuki AI. It adds an AI sales assistant and a shared inbox to a merchant's store. This policy explains what information the app collects, how it is used, who it is shared with, and the choices merchants and their customers have.

For shoppers' data, the merchant who installed Tuki is the data controller and we act as their processor. For merchants' own account data, we are the controller.

1. Information we collect

From the merchant's Shopify store (through the Shopify API, with the permissions the merchant approves):

• Store details: name, domain, contact email, currency, time zone.
• Catalogue and content: products, variants, prices, stock, images, metafields, collections, pages, blog articles, policies and discounts — so the assistant can answer accurately.
• Orders: only the order a customer asks about (verified by order number and checkout email) and the total of orders placed after a chat, for the merchant's sales reports.

From shoppers who use the chat or message the store:

• Messages they send, and replies from the assistant or the merchant's team.
• Contact details they choose to give: name, email, phone.
• Photos they choose to send.
• A device description (for example "Chrome on Android") and a random visitor identifier stored in the browser. IP addresses are not recorded unless the merchant turns that on.
• If the merchant connects email, WhatsApp, Messenger or Instagram: the sender's address, phone number or account identifier and name.
• Simple usage events (for example "added to cart from chat", "rated a reply").

From merchants and their team: account names and emails, settings, and billing status (payments are handled by Shopify — we never see card details).

2. How we use information

• To answer shoppers' questions, recommend products, track orders and pass conversations to the merchant's team.
• To show the merchant their inbox, leads and analytics, and to send the notifications they ask for.
• To bill through Shopify, keep the service secure, prevent abuse and fix problems.

We do not sell personal information, and we do not use shopper conversations to build advertising profiles.

3. AI processing

To write a reply, the relevant conversation and store information are sent to an AI model provider: with "Tuki AI" this is Anthropic (Claude); if the merchant uses their own API key, it is the provider they choose (for example OpenAI, Google or DeepSeek), under that provider's terms. Providers process the data only to generate the reply. We do not use conversations to train AI models. Replies are checked so the assistant does not state prices, part numbers or discounts that are not in the store's data.

4. Who we share information with

• Shopify — the platform the app runs on, and our billing provider.
• AI model providers — as described above.
• Hosting and email delivery providers that run our service.
• Services the merchant connects — Meta (WhatsApp, Messenger, Instagram), email, Klaviyo or Mailchimp — only when the merchant turns them on. Contacts sent to Klaviyo or Mailchimp are added without marketing consent.
• Authorities, when required by law.

5. How long we keep it

• Conversations are kept for as long as the merchant's plan allows, or until the merchant or the customer asks for deletion.
• When a merchant uninstalls Tuki, Shopify asks us to delete the store's data (48 hours later) and we delete it, including conversations, leads and photos.
• When a customer asks a merchant to erase their data, Shopify tells us and we delete that customer's conversations, leads and photos.

6. Security

Data is sent over HTTPS. Access tokens, API keys and channel credentials are encrypted at rest. Every request from Shopify and Meta is verified by its signature, each store's data is kept separate, and customer photos are stored privately. No system is perfectly secure, but we work to protect your data and will notify affected merchants of a breach as the law requires.

7. Cookies and browser storage

The admin uses a session cookie to keep merchants signed in. The chat widget stores the conversation and a random visitor identifier in the shopper's browser (local storage) so the chat continues across pages. The widget does not use advertising or tracking cookies.

8. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its use. Shoppers should contact the store they chatted with; we will help the merchant respond. Merchants can contact us directly at ashiktpi30@gmail.com. You may also complain to your local data protection authority.

9. International transfers

Our providers may process data in countries other than yours. Where required, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Children

Tuki is not directed at children under 16, and we do not knowingly collect their personal information.

11. Changes and contact

We may update this policy; the date at the top shows the latest version, and we will tell merchants about important changes. Questions: ashiktpi30@gmail.com — Tuki AI.