Privacy Policy
Effective: August 1, 2026
GreatsHub operates GreatsHub: AI Shop Assistant, a Shopify app that provides catalog-based product discovery, shopping conversations, cart assistance, merchant analytics, and optional support tools. This policy explains what information the app processes, why it is used, when it may be shared, and the choices available to merchants and shoppers.
Who does this policy apply to?
This policy applies to Shopify merchants who install the app, authorized members of their teams, and shoppers who interact with the storefront assistant. A merchant may have its own privacy policy describing how it handles shopper information; shoppers should also review that policy.
How do we collect information?
Information is received when a merchant installs or configures the app, when Shopify sends authorized app or webhook data, when a shopper uses the storefront assistant, and when the app records operational, security, billing, or usage events required to provide the service.
What merchant and store information do we process?
We may process the Shopify store domain and identifier, store name, contact email, locale, timezone, installation status, authorized access credentials, selected plan, billing status, assistant settings, appearance settings, support details, product-search configuration, and usage allowances. Shopify access credentials are not exposed to storefront visitors.
What shopper and conversation information do we process?
We may process chat messages, an anonymous browser or conversation identifier, language, timestamps, product searches, verified catalog results, assistant replies, feedback, cart confirmations, checkout-link activity, and limited technical information needed for security and service operation. The app does not require shoppers to create a GreatsHub account to use storefront chat.
How is Shopify catalog and commerce data used?
The assistant queries Shopify services to verify products, variants, prices, availability, store policies, cart operations, and permitted order information. Product claims must come from verified store data. Order tools are restricted to supported plans and verified customer or conversation contexts. The app does not intentionally use one merchant’s private data to answer another merchant’s shoppers.
How is artificial intelligence used?
Shopper messages and the minimum relevant store context may be sent to the configured AI service provider to understand requests and generate responses. Tool results may be returned to the AI provider so it can present verified product or policy information. The app instructs the AI not to invent products, prices, stock, policies, or URLs. AI output can still contain mistakes, and merchants should test their configuration and provide a human-support option where appropriate.
How do we use information?
We use information to operate and secure the app; authenticate stores and storefront requests; provide product discovery, policy answers, cart assistance, and permitted order tools; apply plan permissions and usage limits; show merchant analytics; troubleshoot failures; prevent abuse; respond to support requests; meet legal obligations; and improve reliability and usability.
Who can access or receive information?
We do not sell or rent merchant or shopper personal information. Information may be processed by Shopify, the configured AI provider, hosting and infrastructure providers, email or support providers when used, and professional advisers or authorities when reasonably required by law, security, fraud prevention, or protection of legal rights. Providers receive only information reasonably necessary for their role and are subject to their own terms and privacy obligations.
Payments and billing
Shopify manages app subscription approval and billing for Shopify plans. GreatsHub does not receive or store a shopper’s or merchant’s full payment-card details through this app. Shopify’s terms and privacy policy apply to billing information processed by Shopify.
How long is information retained?
Conversation records and related tool activity are retained only for the configured operational period and are eligible for scheduled deletion when expired. Browser chat history may be stored locally in the shopper’s browser for the period described in the app experience and can be cleared by starting a new chat or clearing browser storage. Some billing, security, support, and minimal uninstall audit records may be retained where reasonably necessary for legal, fraud-prevention, accounting, or operational purposes.
What happens when the app is uninstalled?
The Shopify uninstall webhook disables the installation and initiates cleanup of store-specific app data. Shopify privacy webhooks for customer data requests, customer erasure, and shop erasure are verified before processing. A limited audit record may be retained when necessary to document the uninstall or meet legal and security obligations.
How do we protect information?
We use HTTPS in transit, encryption for stored Shopify credentials, signed storefront and merchant requests, store-level data isolation, authorization checks, rate and usage limits, restricted order access, and logging designed to avoid exposing secrets. No system is completely secure, so merchants should never place API keys, passwords, payment information, or unnecessary sensitive personal information in assistant instructions or chat messages.
International data transfers
Shopify, GreatsHub infrastructure, and service providers may process information in countries other than the merchant’s or shopper’s country. Where required, appropriate contractual or legal safeguards are used by the relevant provider for international transfers.
Your choices and privacy rights
Depending on location, individuals may have rights to request access, correction, deletion, restriction, objection, or portability of personal information. Shoppers should normally contact the Shopify merchant first because the merchant controls the storefront relationship. Merchants and individuals may also contact GreatsHub using the address below. We may need to verify the requester and coordinate with Shopify or the merchant before completing a request.
Children’s privacy
GreatsHub: AI Shop Assistant is a business commerce service and is not directed to children. Merchants are responsible for configuring and operating their stores in accordance with applicable age and child-privacy requirements.
Cookies and browser storage
The storefront assistant may use browser storage for an anonymous visitor identifier, short-lived authorization information, and recent chat continuity. Merchants may need to describe this use in their own cookie or privacy notices where required by applicable law.
Links and third-party services
The assistant may provide links to Shopify product pages, checkout, merchant support, WhatsApp, or other merchant-configured destinations. GreatsHub is not responsible for the privacy practices of third-party websites or services, and users should review their applicable policies.
Changes to this policy
We may update this policy to reflect changes in the app, providers, security practices, or legal requirements. The effective date shown above identifies the latest published version. Material changes may also be communicated through the app or another appropriate channel.
Contact us
For privacy questions, complaints, or requests, email support@greatshub.com. Include the relevant myshopify.com store domain and enough information to identify the request, but do not send passwords, API keys, access tokens, or payment-card information.