Privacy Policy
Goldie ("the App") provides a conversational shopping assistant with price negotiation for Shopify stores ("the Service") to merchants who use Shopify to power their stores. This policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
Information we collect from merchants
- Store configuration: your store domain, the settings you choose (bot name, greeting, negotiation limits, theme colors), and the API access token Shopify issues to the App at installation.
- AI provider key: the API key you provide for your chosen AI provider (Anthropic, OpenAI, or Google). It is stored encrypted at rest on our servers, used solely to make AI requests on your store's behalf, and is never exposed to your storefront or to shoppers.
- Product data: the App reads your product catalog (titles, descriptions, prices, tags) to power chat and negotiation. Catalog data is fetched on demand and not retained.
Information we process about shoppers
- Chat messages: what shoppers type to the assistant. Sessions are identified only by a random session ID — we do not collect names, email addresses, accounts, payment details, or order history, and we cannot link a chat session to a customer identity. Only the most recent messages of a session are retained, and sessions are periodically purged.
- Chat messages are sent to the AI provider selected by the merchant (Anthropic, OpenAI, or Google) to generate responses, subject to that provider's data policies.
- When a shopper agrees on a price, the App creates a draft order in the merchant's Shopify store containing only the product, quantity, and agreed price — no shopper personal information.
How we use the information
Solely to operate the Service: answering shopper questions, negotiating within merchant-set limits, creating draft orders at agreed prices, and letting merchants configure the App. We do not sell, rent, or share personal information with third parties for their own purposes, and we do not use chat data for advertising or to train AI models.
Data retention & deletion
- Store settings and tokens are kept while the App is installed.
- Upon uninstallation, Shopify sends us a redaction request and we permanently delete all data for the store — settings, access tokens, AI keys, and chat sessions — within 30 days.
- The App implements Shopify's mandatory privacy webhooks (
customers/data_request,customers/redact,shop/redact).
Sharing
We share data only with: Shopify (to operate the App), your selected AI provider (chat text, to generate responses), and Google Cloud (our hosting and database infrastructure). Each processes data under their own terms and safeguards. We may also disclose information to comply with applicable laws or lawful requests.
Security
All traffic is encrypted in transit (TLS). Secrets are stored in Google Cloud Secret Manager and Firestore with access restricted to the Service. Webhooks and storefront requests are verified with HMAC signatures.
Your rights
Depending on your location, you may have rights to access, correct, or delete personal information (including under GDPR and CCPA). European and UK data may be transferred outside Europe as described above. To exercise any right, contact us and we will respond within 30 days.
Contact
Questions or requests: ywelikala@gmail.com