ChatConvert Privacy Policy

ChatConvert (“the App”) is an AI product-selection chat assistant for Shopify stores, built and operated by Progryss (“we”, “us”). The App adds a chat widget to a merchant’s storefront that helps shoppers find the right product from the store’s real, in-stock catalog and answers questions from the store’s own content. This policy explains what data the App collects, how we use it, who we share it with, and the choices merchants and shoppers have.

By installing ChatConvert, you agree to the collection and use of information as described here. If you do not agree, please do not install or use the App.

What we collect

From merchants (the store that installs the App):

• Store profile — shop name, myshopify domain, store email, country, currency, timezone and plan, provided by Shopify at install.
• Product catalog — products, variants, collections, prices, images and inventory status, synced from Shopify so the assistant only recommends real, in-stock items.
• App configuration — curated answers, recommendation rules, persona and voice settings, guardrails, widget appearance, and the knowledge sources you add (crawled pages from your own site, uploaded PDF/CSV files, manual Q&A, and store policies).
• Billing status — your plan tier and subscription state. All charges are handled by the Shopify Billing API; we never see or store payment details.

From shoppers (visitors who use the chat widget):

• Chat messages — what the shopper types and the assistant’s replies, stored as a conversation transcript for the merchant.
• A session identifier — a randomly generated ID kept in the shopper’s browser so a conversation stays connected across messages. It is not tied to a Shopify account or advertising ID.
• Email address, only if the shopper chooses to leave it — when the assistant can’t answer, it may offer to pass the question to the store; the shopper can optionally enter an email. We never require it.
• Usage events — first-party, aggregate widget analytics (opens, messages sent, product clicks) so merchants can see how the assistant performs.

We do not collect shopper names, phone numbers, accounts, payment details, or precise location, and we do not use third-party advertising trackers. Chat is free text, so a shopper may type personal information into a message; anything they type is stored as part of the transcript and is covered by the deletion rights described in sections 5 and 6.

How we use it

• To run the chat assistant — understand the shopper’s question and recommend matching in-stock products, or answer from the store’s own knowledge content.
• To show merchants their conversation transcripts, unanswered questions and analytics in the App’s dashboard.
• To pass optionally captured shopper emails to the merchant so they can follow up.
• To manage plans and billing through Shopify, provide support, and keep the App secure and compliant.

We do not sell or rent any merchant or shopper data, and we do not use it for advertising.

AI processing (OpenAI)

ChatConvert uses OpenAI as its AI sub-processor. To generate a reply, we send the conversation messages together with relevant snippets of the store’s catalog and knowledge content to OpenAI’s API (the gpt-4o-mini chat model and text-embedding-3-small for content matching). This data is used solely to produce the assistant’s response. Under OpenAI’s API data-usage policy, data submitted via the API is not used to train OpenAI’s models. We do not send shopper emails or Shopify account credentials to OpenAI.

Sharing & sub-processors

We share data only with the services required to run the App:

• Shopify — the platform the App runs on (install, authentication, catalog, billing, and the storefront where the widget appears).
• Gadget (gadget.dev) — our hosting and database platform, where the App’s backend and all stored data live.
• OpenAI — AI processing as described in section 3.

Beyond these, we disclose data only if required by law. Merchants are notified of any material change to our sub-processors via an update to this policy.

Retention & deletion

• Conversations, analytics and configuration are retained while the App is installed, so merchants keep their history and settings.
• When a merchant uninstalls the App, billing stops immediately. Store configuration is kept for roughly 48 hours so a quick reinstall doesn’t lose settings.
• About 48 hours after uninstall, Shopify sends the shop/redact request and we permanently delete all of that store’s data — conversations, messages, captured emails, analytics, knowledge content and configuration.
• Individual shoppers’ data can be deleted earlier at any time via the redaction process in section 7.

Shopify compliance webhooks (GDPR)

ChatConvert implements all three of Shopify’s mandatory privacy webhooks:

• customers/data_request — we compile everything stored about that shopper (their conversations and messages), and the merchant can retrieve the export from the App’s Privacy page within 30 days.
• customers/redact — we permanently delete that shopper’s conversations, messages and any captured email for the requesting store.
• shop/redact — we permanently delete all of the store’s data, as described in section 5.

Security & data transfers

• All data is transmitted over HTTPS/TLS and stored on Gadget’s managed cloud infrastructure.
• The App authenticates with Shopify session tokens; we never collect or store Shopify login credentials.
• Every record is scoped to a single store with enforced tenant isolation — one store can never access another store’s data.
• Data may be processed on servers outside your country (including the United States). Where required, transfers rely on recognised safeguards such as Standard Contractual Clauses.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing.

• Shoppers: the store you chatted with is the data controller for your conversation. Contact that store directly — they can fulfil access and deletion requests through Shopify, and we honour those requests automatically via the webhooks in section 6.
• Merchants: contact us at the address below for any data request about your store.

We may update this policy from time to time; the “Last updated” date at the top will change when we do. Material changes will be communicated to installed merchants.

Contact