Sairo — Privacy Policy

Last updated: July 6, 2026

Sairo ("the App", "we", "us") provides an AI shopping assistant for Shopify stores. This policy describes what information we collect when a merchant installs the App or a store visitor interacts with the Sairo chat widget, how it is used, and the rights available to merchants and their customers.

1. Information we collect

From merchants (when the App is installed):

• Store name, myshopify.com domain, store contact email, currency and locale.
• An API access token issued by Shopify, used solely to operate the App's features.
• Product catalog data (titles, descriptions, options, variants, prices, inventory, images) to power product answers and recommendations.
• Content you add to the knowledge base (FAQs, policies, articles).
• App configuration (widget appearance, greetings, behavior settings, plan and usage counts).

From store visitors (when they use the chat widget):

• Chat messages the visitor sends, and the assistant's replies.
• A randomly generated anonymous visitor identifier (no account required, no cross-site tracking).
• The page URL where a conversation started, and shopping events on the merchant's store used to produce store analytics for the merchant.
• Contact details (such as name and email) only when a visitor chooses to share them with the assistant, e.g. to be notified about a product.
• Cart value and order reference when a purchase follows a conversation (for the merchant's conversion reporting).

We do not collect: payment card details, passwords, or precise geolocation. We do not use visitor data for advertising, cross-store profiling, or sale to third parties.

2. How we use information

• To answer store visitors' questions and recommend products from the merchant's own catalog.
• To show merchants analytics about conversations, conversions and shopper drop-off in their own store.
• To send merchants the reports they opt into (daily briefing, periodic reviews).
• To operate billing through the Shopify Billing API (we never see payment details).
• To provide merchant support and improve reliability (aggregated, de-identified diagnostics only).

Chat content is processed by our AI model provider as a data processor solely to generate responses; it is not used to train third-party models.

3. Roles and legal bases (GDPR)

Where GDPR applies, we process data under: performance of a contract (providing the App to the merchant), legitimate interest (service analytics, fraud prevention), and consent where required by the merchant's own cookie/consent setup. For store-visitor data, the merchant is the data controller and Sairo acts as a data processor on their behalf.

4. Data sharing

We share data only with: Shopify (platform operation), our cloud database and hosting providers, our email delivery provider (for merchant reports), and our AI inference provider — each under data processing agreements. We disclose data if required by law.

5. Retention and deletion

• Conversations and analytics events: retained for 24 months, then deleted or anonymized.
• Merchant data: deleted within 30 days of app uninstallation.
• We honor Shopify's mandatory privacy webhooks automatically: customers/data_request (we export any data held for the requested customer), customers/redact (we delete conversations, leads and events linked to the requested customer), and shop/redact (we delete all store data after uninstall).

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access tokens are stored securely, access is restricted and logged, and the database enforces per-store isolation with row-level security.

7. Your rights

Merchants and their customers may request access, correction, deletion, or portability of personal data. Store visitors should contact the store they interacted with; merchants can contact us directly and we will assist within 30 days.

8. Children

Sairo is not directed at children under 16 and we do not knowingly collect their data.

9. Changes

We will post updates to this page and notify merchants in-app of material changes.

10. Contact

Email: fahimomi12@gmail.com