Privacy Policy

Handychat provides an AI sales agent for Shopify stores. For data about merchants and visitors to this website, Handychat is the controller. For shopper conversations handled for a store, Handychat is the processor and the merchant is the controller.

The legal entity name and registered address will be added here before publication. In the meantime, write to privacy@handychat.ai.

We collect the following groups of data.

• Merchant data: name, work email, store URL, plan and billing status, and the settings and knowledge you give the agent.
• Shopper conversation data: the messages a shopper sends, the replies, and contact details a shopper chooses to share, such as an email address or phone number.
• Store data from Shopify: catalog, orders, customers and policies, only as far as the permissions you approve at install.
• Website data: form submissions, and technical data such as IP address and browser type. We do not run third-party advertising trackers on this site.

We use data to provide the service, answer shopper questions, verify order changes, process billing, keep the service secure, respond to your requests, and improve reliability.

We do not sell personal data.

Where data protection law requires a legal basis, we rely on performing our contract with merchants, our legitimate interests in running and securing the service, compliance with legal obligations, and consent where we ask for it. The final list of bases will be confirmed in legal review.

Handychat uses AI models to draft and send replies. Replies are labeled as AI, and a shopper can ask for a person at any time. When the agent is unsure, it hands the conversation to the merchant's team.

Shopper messages and the store context needed to answer them are sent to our AI model providers listed on the Subprocessors page. The agent does not change an order until the shopper has confirmed the action and, for order changes, entered a one-time code.

We share data with the service providers that run Handychat, and with the messaging channels a merchant connects. The current list is on the Subprocessors page. We may also share data where the law requires it.

Our providers operate in several countries, so data may be processed outside the country where you live. Where required, we will put transfer safeguards in place. Details will be confirmed in legal review.

We keep data for as long as it is needed to provide the service and meet legal obligations. Specific retention periods will be published here after legal review. When a merchant uninstalls the app or Shopify sends a redact request, we delete the related data as described in our Data Processing Addendum.

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Shoppers should first contact the store they talked to, because the store controls that data. You can also write to privacy@handychat.ai.

Handychat responds to Shopify's privacy webhooks for customer data requests, customer redaction and shop redaction.

We use technical and organizational measures to protect data. They are described on the Security page. No system is perfectly secure, and we will tell affected parties about a breach as the law requires.

Handychat is built for merchants and is not directed at children. We do not knowingly collect personal data from children through this website.

We will post changes on this page and update the version and date. For material changes, we will also notify merchants by email.

For any privacy question, write to privacy@handychat.ai.