Last updated: June 26, 2026BitoChat (“we”, “the app”) is an AI customer-support chatbot for Shopify stores. This policy explains what data the app processes, why, and how it is protected.Store catalog & content — active products, pages and shop policies synced from your Shopify store to power answers.Chat conversations — messages exchanged between your storefront visitors and the chatbot, including a generated session ID.Leads — an email address and message when a visitor asks to be contacted or the bot cannot answer.Operational data — message-usage counts, billing records and your store domain.To answer shopper questions grounded in your own store content.To show product recommendations and capture leads for you.To provide analytics, billing and message-credit accounting in your dashboard.We do not sell your data or use it for advertising.To deliver the service, content is processed by:Third-party AI service — generates embeddings and chat replies. Text sent for a reply is processed transiently to produce the answer.Vector database (Qdrant) — stores numerical embeddings of your store content for search.Shopify — the platform your store and billing run on.The storefront chat widget does not set advertising or cross-site tracking cookies. It stores a randomly generated session ID and recent message history in your visitor’s browser local storage so the conversation persists across page loads. This data stays on the visitor’s device and is cleared when they reset the chat.The app and its service providers may process and store data on servers located outside your or your shoppers’ region of origin, including outside the EU/EEA. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.We keep personal data only as long as needed to provide the service. Chat records and leads are retained to power your dashboard until you delete them, and you can remove them at any time. When you uninstall the app, all of your store’s data — products, content, conversations, leads, billing records and embeddings — is permanently deleted. We also honour Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact).Depending on your location, you and your shoppers may have rights to access, correct, export, or delete personal data, or to restrict its processing. Email us at the address below to make a request, or use Shopify’s built-in data request and erasure tools, which we honour through the mandatory privacy webhooks listed above.Visitors choose what they type into the chat. As the merchant, you are the data controller for your shoppers’ information and are responsible for disclosing chatbot use in your own store privacy policy where required by law.Data is transmitted over HTTPS. Storefront requests are verified through Shopify’s App Proxy signatures, and admin access uses Shopify OAuth — we never receive your password.Questions about this policy or your data? Email support@bitochat.app.We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.