Privacy policy

• Your account: your name, email address, password (stored hashed, never in plain text), passkeys and two-factor settings if you set them up, and which teams you belong to. We use it to give you the service you signed up for.
• Billing: for a team with a plan, the name and email address of its Paddle account, its plan, and its invoices (number, amount, tax and status). Card and payment details stay with Paddle.
• Connected assistants: which AI assistants you've connected to StoreAsk, and their access keys.
• Signing in: your IP address and browser details, used to keep you signed in and to limit repeated sign-in attempts.
• Your store's data: what we read from a WooCommerce store with the read-only access its owner approves in wp-admin. For this data, the store is in charge (the controller) and we process it on the store's behalf.

• Store settings: currency, timezone, how prices and taxes are shown, and which orders WooCommerce Analytics counts.
• Products, variations, categories, tags and coupons: names, SKUs, prices, stock, whether they're published, and product costs if the store keeps them in WooCommerce or a cost-of-goods plugin.
• Orders and refunds: order numbers, dates, statuses, items, totals, discounts, tax and shipping, the billing country and region, and order attribution (traffic source, campaign, referring domain, landing page path without its query string, and device type).
• Customers: their WooCommerce customer number. For guest orders, if the store has guest matching on (it is by default), a keyed hash of the guest's email address, so repeat guests can be recognised. The email address itself is not stored.

We don't store customers' names, email addresses, phone numbers, street addresses, postcodes, IP addresses or browser details.

• Reports calculated from the store's data.
• Alerts and weekly emails, sent to the team members the owner chooses.
• Product costs, lead times and notes (events) that you enter.
• Your conversations in the app's chat and the answers you pin.

• Chat in StoreAsk: your questions and the results of the lookups made to answer them are sent to the provider of the AI model. These results contain figures, product names and customer numbers, not customers' names or contact details.
• Claude, ChatGPT and other assistants you connect: when you connect your own AI assistant to StoreAsk, the results of the lookups it asks for are sent to that assistant. If a store turns on "Show customer names in AI chats", these results include its registered customers' first and last names, looked up in the store for that answer and not stored by us. That data is then processed under your own agreement with the assistant's provider, not by us.

• A hosting provider in the EU: hosting of the service and its database.
• An AI model provider: the AI model behind the chat in StoreAsk.
• An email delivery provider: sending emails (sign-in emails, alerts and weekly emails).
• Paddle (paddle.com): our reseller, which sells StoreAsk plans and handles payments, invoices and tax under its own privacy policy. When you view the plans, your IP address is sent to Paddle to show prices in your currency.

We use cookies to keep you signed in, protect forms, and remember display preferences (light or dark mode, and whether the sidebar is open).

• Disconnecting a store: we stop reading it at once and forget its access key. The store and everything we read from it or created from it are deleted 30 days later, or straight away if you choose "Delete now".
• Deleting a team: its stores (with all their data), chats and pinned answers are deleted.
• Deleting your account: your account, chats, notices and connected assistants' access are deleted, and so are teams you're the only member of, with their stores.
• Chats stay until you delete them, or the team or your account is deleted.
• Connected assistants: an assistant keeps its access until you disconnect it in Settings, or until it hasn't been used for about 6 months.

• Our access to stores is read-only; we can't change anything in a store.
• Stores' access keys are stored encrypted.
• Each team can only see its own stores.

You can see and change your account details in the app, and delete your account in its settings. For anything else about your data, such as a copy of it, contact [email protected]. If you're a customer of a store that uses StoreAsk, contact that store: it decides how its customers' data is handled. You can also complain to the Swedish Authority for Privacy Protection (IMY).