Privacy Policy

Website

Information submitted through this website may be used to respond to inquiries, provide requested services, and improve customer communication. We do not sell personal information. For questions, contact info@neuroadsinc.com.

NeuroAds Chatbot (Shopify app) — Protected Customer Data

NeuroAds Chatbot is an AI assistant that merchants install on their Shopify store to answer their customers' questions. In the course of providing this service, the app accesses a limited amount of protected customer data from the merchant's Shopify store. This section explains what we access, why, how we handle it, and how it can be deleted. We access this data under Shopify's Protected Customer Data requirements (Level 2 approval for the Order object and associated customer fields).

What we access

• Order data, retrieved from the Shopify Admin API using the read_orders scope: order number, order and fulfillment status, tracking information, line items, order totals, and the name, email, phone number, and shipping address associated with an order.
• Shopper identity for signed-in customers: the Shopify customer ID, provided only through Shopify's authenticated App Proxy when a logged-in shopper uses the chat on the storefront.
• Chat messages that the shopper types into the chat widget, which may include information the shopper chooses to share (for example, an order number and postal code used to look up an order).

We request only the minimum Shopify access scopes required to operate (read_orders, read_products, read_discounts, read_content, read_legal_policies). We do not request access to the store's customer list (no read_customers scope), and we do not access customer records outside the context of an order the shopper is asking about.

How we use it

Protected customer data is used solely to answer the individual shopper's own questions in real time — for example, looking up their order status or tracking (a guest verifies with their order number and postal code; a signed-in shopper is identified through Shopify's authenticated App Proxy). We do not use this data for marketing, advertising, profiling, building customer lists, or any purpose other than responding to the shopper in the chat, and we do not sell it.

How it is stored and secured

• Order data is fetched live from Shopify each time a shopper asks and is used only to compose the chat reply. We do not store order data in our systems.
• Chat transcripts (the shopper's messages and the assistant's replies) are stored in our database to operate and support the service.
• All data is transmitted over encrypted connections (TLS) and stored on managed infrastructure with encryption at rest and role-based access controls. Our systems are hosted on Amazon Web Services (US region).

Sub-processors

To provide the service, protected customer data (specifically, the content of chat messages) may be processed by:

• OpenAI — to generate the assistant's replies and text embeddings. Message content is sent to OpenAI's API; per OpenAI's API data-usage policy, API data is not used to train their models.
• Amazon Web Services — cloud hosting and data storage (US region).
• Langfuse — application observability and quality monitoring of the AI pipeline.

We do not share protected customer data with any other third parties except as required by law.

Retention

• Order data: not retained (fetched live at query time).
• Chat sessions expire after 15 minutes of inactivity.
• Chat transcripts are retained to operate and support the service and are automatically and permanently deleted 90 days after the conversation ends. They are also deleted sooner when we receive a Shopify customers/redact request for the relevant customer, or a shop/redact request when the merchant uninstalls the app.

Deletion and data requests

We support Shopify's mandatory privacy webhooks:

• customers/data_request — we compile and provide the data we hold for a customer on request.
• customers/redact — we delete the chat transcripts and support requests associated with a customer.
• shop/redact — we delete all of a store's data when the app is uninstalled.

Shoppers and merchants may also contact us at info@neuroadsinc.com to request access to, or deletion of, their data. Shoppers should direct requests to the merchant whose store they interacted with; the merchant, as the data controller, can forward them to us.

Contact

NEUROAD VENTURES LLC — info@neuroadsinc.com — 23 Corporate Plaza Drive, Newport Beach, CA 92660, US