Privacy Policy | KwikKartBot AI

KwikKart Technologies ("KwikKartBot AI," "we," "us," or "our") provides an AI shopping assistant app ("the App") for Shopify stores. This Privacy Policy explains what data we collect when a merchant installs the App and when a shopper uses the chat widget on a merchant's storefront, how we use and share that data, and the choices and rights available to you.

By installing the App or using the chat widget, you agree to the collection and use of information as described in this policy. If you do not agree, please do not install or use the App.

1. Information we collect

From merchants who install the App. When a store installs KwikKartBot AI, Shopify shares store and account data with us based on the API access scopes the merchant approves during installation, which may include:

Store details — shop name, domain, contact email, currency, and plan.
Product and catalog data — products, variants, collections, inventory, and pricing, used to power recommendations and answer product questions.
Order data — order status, fulfillment, and shipment tracking details, used to answer order-tracking questions in chat.
Customer data made available by Shopify — such as name, email, and order history, used only to look up and answer that customer's own questions.

From shoppers who use the chat widget. When a shopper chats with the assistant on a merchant's storefront, we may process:

Chat messages and conversation history with the assistant.
Order number, email, or other details a shopper voluntarily provides to look up an order.
Basic technical data — IP address, browser type, device type, and pages visited, collected automatically to operate and secure the chat widget.

From merchant team members. If a merchant's staff create an account on our dashboard, we collect their name, email, and login credentials.

2. How we use information

To operate the App — sync catalogs and orders, generate AI responses, and display them in the chat widget.
To answer shopper questions about products, orders, shipping, and store policies.
To provide merchants with a dashboard, analytics, and revenue-attribution reporting.
To maintain, secure, monitor, and improve the App, including debugging and preventing abuse.
To communicate with merchants about their account, support requests, and product updates.
To comply with legal obligations and enforce our terms.

We do not use shopper or merchant data to train our own AI models, and we do not sell personal information.

3. AI processing and sub-processors

To generate chat responses, relevant conversation text and the store context needed to answer a question (such as matching product or order details) are sent to a third-party AI service provider for processing. That provider processes the data solely to return a response to KwikKartBot AI and does not use it to train models on our merchants' behalf.

We also use trusted infrastructure providers for hosting, database storage, and analytics. All sub-processors are bound by confidentiality and data-protection obligations consistent with this policy, and we periodically review them for compliance.

4. How we share information

We do not sell personal information. We share data only:

With the sub-processors described above, to operate the App.
With the merchant whose store a shopper is chatting on, so they can review conversations and support their own customers.
With Shopify, as required for the App to function through the Shopify platform.
If required by law, regulation, legal process, or governmental request.
In connection with a merger, acquisition, financing, or sale of assets, subject to this policy or its equivalent.

5. Data retention

We retain merchant store data and chat conversation history for as long as the App remains installed, and for a limited period afterward to allow reinstallation and meet legal, accounting, or reporting obligations. When a merchant uninstalls the App, we delete or anonymize their store data and associated shopper conversation data within 30 days, except where retention is required by law.

6. Shopify data compliance

As required by Shopify's API Terms and the mandatory GDPR webhooks for apps, we support and respond to:

customers/data_request — provide a copy of the data we hold about a specific customer, upon Shopify's request.
customers/redact — delete a specific customer's personal data upon Shopify's request, unless we are legally required to retain it.
shop/redact — delete a merchant's store data after the App has been uninstalled for the period required by Shopify.

7. Your privacy rights

Depending on where you live (including under the GDPR, UK GDPR, and US state privacy laws such as the CCPA), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your personal data.
Object to or restrict certain processing.
Request a portable copy of your data.

Shoppers should contact the merchant's store first, since merchants control their own customer relationships; merchants and shoppers can also contact us directly using the details below, and we will respond within a reasonable time and in accordance with applicable law.

8. Cookies and similar technologies

The chat widget and our merchant dashboard use cookies and similar technologies to keep a shopper's conversation active across page views, remember dashboard sessions, and understand aggregate usage through analytics. You can control cookies through your browser settings; disabling them may affect chat widget functionality.

9. Data security

We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and monitoring — to protect data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The App is intended for use by merchants and their adult customers. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will delete it promptly.

11. International data transfers

We and our sub-processors may process and store data in countries other than your own, including India and the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect data transferred internationally.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised effective date, and where changes are material we will provide additional notice to merchants.

13. Contact us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at mrdeepak111099@gmail.com, or for general app support at support@kwikkartbot.in.