Your store's data, and your shoppers'
What KameleonAI reads, who processes it, and what happens when you leave. Every line here is in our published legal documents.
- GDPR DPA on every install
- No customer names or emails from Shopify
- Deleted within 30 days of uninstall
What it needs to sell
- Your products, variants, prices and stock
- Discounts and markets
- Orders, to count the sales it touched
- Shopper activity, through Shopify's own sandboxed pixel
- Your shipping and return policies
What it never asks for
- Your customers' names, emails, phone numbers or addresses from Shopify
- Card or payment details. Shopify handles billing
- Write access to your theme. Nothing in your theme is edited
- Training data for any AI model
What we commit to
Never used to train a model
Our AI providers are contractually barred from it too.
Every sub-processor named
Who processes data for us, what each does and where, in our DPA. 30 days' notice before adding one.
Shoppers stay in control
Where consent is required, nothing is tracked until a shopper gives it.
Shoppers can delete their chat
Any shopper can delete their own conversation from the chat.
Says it is AI
Every shopper is told they are talking to AI.
The same offer for everyone
What it learns about a shopper never changes the price or the discount, and that is enforced in the code.
From install to goodbye
The DPA applies
Our data processing agreement covers your store from the first day.
Only what it needs
It reads the catalog and orders it needs to sell and to count.
Shopify tells us
Shopify sends us a deletion request after you uninstall.
Personal data gone
All personal data from your store is deleted. Billing records stay as tax law requires.
The documents
Security question? Write to security@kameleonai.com