Privacy Policy

This Privacy Policy explains how Vosaire (“we”, “us”), through our Shopify app, collects, uses, and protects data when a merchant installs Vosaire on their Shopify store.

This policy covers two groups: (A) Merchants — the Shopify store owners and staff who install and configure Vosaire; and (B) Shoppers— visitors to a merchant's storefront who interact with the Vosaire chat widget. For Shopper data, the Merchant is the data controller and Vosaire processes that data as a processor on the Merchant's behalf.

This Shopify app is a distinct product from any other Vosaire platform or product — installing it does not create or affect any account on another Vosaire product.

When a merchant installs Vosaire, we collect and process the following, solely to deliver the app's features:

• Store information: shop name, shop owner email, store URL, and shop ID
• Products, collections, pages, blog posts, and store policies — used to train Vosaire's AI knowledge base
• Live inventory and stock levels, for real-time availability answers (on qualifying plans)
• Order data — order number, line items, and fulfillment status — for order-status lookup
• Customer email addresses associated with orders, for order lookup and coupon attribution
• Customer notes, tags, and email/SMS marketing consent, written back to Shopify only when a merchant enables that feature (on qualifying plans)
• Discount codes and draft orders created on the merchant's behalf, only when a merchant enables the Sales agent (on qualifying plans)
• Theme structure metadata, read-only, used to guide merchants through activating the storefront widget — Vosaire never writes to a theme
• Conversation transcripts between Vosaire and shoppers
• Revenue attribution linking conversations to completed orders

All data above may be transmitted to OpenAI to generate AI responses — see Section 5.4.

A merchant may optionally connect a Gmail inbox from Vosaire's Channels settings so Vosaire can read incoming customer emails and draft or send AI-generated replies. This is off by default — Vosaire never accesses Gmail unless a merchant explicitly connects an account.

What we access. Once connected, we access:

• The subject, sender, and body of messages in the connected inbox, to detect customer support emails
• The ability to mark a processed message as read
• The ability to create a draft reply, or send a reply on the merchant's behalf, within the same email thread the customer started
• The connected account's name and email address, to identify the connection

We never access Sent mail, Trash, contacts, calendar, or any other Google product beyond the connected Gmail inbox, and we never send a new email outside a thread the customer started.

How we use it. Email content is used solely to generate an AI reply to that specific message, exactly as described in Section 5.4 (AI and LLM processing). Sending is automatic only when a merchant has explicitly enabled auto-reply for that connection; otherwise, Vosaire saves a draft in Gmail for the merchant to review and send themselves.

Limited Use disclosure.Vosaire's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data to serve advertisements, sell it, or transfer it to third parties except as needed to provide the reply-generation feature itself (see Section 5.4), and we do not use Gmail data to train or improve any generalized (non-personalized) AI or machine learning model.

Turning it off.A merchant can stop Vosaire reading a Gmail inbox at any time by disconnecting the channel from Vosaire's Channels settings, or by removing the connection entirely from Vosaire's Integrations settings — either immediately stops any further access. A merchant can also revoke Vosaire's access directly from their Google Account's third-party access settings. Emails already processed into a conversation are retained per Section 5.5; if Vosaire is fully uninstalled, all data including any Gmail-derived conversation content is deleted per Section 5.8's shop/redact process.

Vosaire uses OpenAIas its LLM provider. When Vosaire answers a shopper — or, if a merchant has connected Gmail, a customer email received through that inbox — relevant store data, email content, and conversation context is sent to OpenAI's API over an encrypted connection.

We do not use your store data, Gmail content, or conversation content to train, fine-tune, or improve any AI model— including Vosaire's own systems or OpenAI's foundation models. OpenAI's API data usage terms prohibit training on API inputs by default.

AI-generated responses may occasionally be inaccurate or incomplete. Merchants and shoppers should verify important information independently.

Vosaire never handles payment card or billing data directly — subscription billing runs entirely through Shopify. See our Refund Policy.

Data is stored primarily on servers in the European Union (Hetzner, Germany), with file storage in the United States (Cloudflare R2). We use TLS 1.3 in transit, AES-256 encryption at rest, and role-based access controls. Gmail OAuth credentials are encrypted at rest using the same controls.

In the event of a data breach affecting personal data, we will notify affected merchants and, where required, supervisory authorities within 72 hours of becoming aware.

We use the following sub-processors, each bound by a data processing agreement:

Vosaire implements all three Shopify-required GDPR compliance webhooks:

• customers/data_request — acknowledged within 30 days; we notify the merchant of all data held for that customer.
• customers/redact — customer PII is anonymized and related coupon records removed within 30 days of the request.
• shop/redact — all data tied to the merchant's store (conversations, knowledge sources, revenue records, Gmail-derived data, organization record) is permanently deleted within 30 days of uninstallation.

Vosaire requests only the scopes needed to deliver its features.

This Privacy Policy explains how Vosaire(“we”, “us”) collects, uses and protects data through the Shopify app Vosaire: AI Visibility & AEO(“the app”). The app asks AI assistants the questions shoppers ask about what a store sells, shows which stores they recommend, and helps the merchant improve their product data.

It covers two groups: (A) Merchants — Shopify store owners and staff who install and use the app; and (B) Shoppers— visitors to a merchant's storefront. The app never talks to shoppers directly. For the limited shopper data it handles (see Section 6.2, “Storefront events”), the merchant is the data controller and we process it on the merchant's behalf.

This policy is only for this app. Other Vosaire apps have their own policies, and your visit to vosaire.com itself is covered by the website section of our main privacy policy.

The app installs with read-only access. It collects only what its features need, through the Shopify permissions listed here.

• To write buyer questions from your catalog and ask AI assistants those questions
• To read AI answers, show where you are recommended and who is recommended instead
• To check your products and storefront for what AI assistants and shopping agents need
• To draft product details and answer pages for you to review
• To count visits and orders that came from AI assistants
• To send you a weekly report and alerts by email, which you can turn off in Settings
• To handle billing through Shopify, keep the app secure and fix problems

We do not sell, rent or share your data for advertising, and we do not sell or share shoppers' personal information.

The app uses AI in two ways:

• Asking AI assistants your buyer questions.Each question is sent, with live web search on, to the assistants on your plan: ChatGPT (OpenAI) on every plan, Gemini (Google) and Perplexity on Growth and Pro, and Claude (Anthropic) and Grok (xAI) on Pro. Only the question, in the language it is asked in, and the shopper's country are sent.
• The app's own AI work — writing questions, reading answers, comparing competitors, drafting product details and answer pages. This sends your store information, product data, store profile and AI answers to our AI model provider (Anthropic by default; OpenAI may also be used).

Prompts never contain shopper personal data. We do not use your store data to train or fine-tune any AI model. Each provider handles API requests under its own API terms and privacy policy.

AI answers are about public information, so to save cost, an assistant's answer to the exact same question, in the same country, may be reused for another store within 72 hours. Your store data, settings and results are never shared with other stores.

AI-generated content can be wrong or incomplete. Review every draft before you apply it.

• While the app is installed, we keep your data so the app can show trends over time.
• When you uninstall, the app's access tokens are deleted at once and the app stops reading your store.
• 48 hours after uninstall, Shopify sends the shop/redact request and we delete everything the app holds about your store: catalog, orders, storefront events, questions, answers, drafts, settings and files. If you reinstall before then, nothing is deleted.
• Copies of Shopify webhook payloads are emptied after 30 days, and the log rows deleted after 90 days.
• Customer data exports (Section 6.6) are deleted once you mark them sent, or after 90 days.
• Encrypted database backups expire on a fixed schedule; most within 4 months, with one yearly copy kept for up to 2 years. Deleted data disappears from backups as they expire.

The app handles Shopify's three mandatory privacy webhooks:

• customers/data_request — we collect what the app holds about that customer (their orders as stored) into an export file. You download it from Settings → Privacy in the app and send it to the customer. We also email you when a request arrives.
• customers/redact— we remove that customer's personal data from stored orders, refunds and webhook logs, and delete their storefront events, AI visits and checkouts seen by the pixel. Sales totals stay, without personal data.
• shop/redact— we delete all of the store's data, as described in Section 6.5.

Each request is recorded with its due date (30 days). Who a request was about is stored encrypted until the request is handled, then removed.

We share data only with the services below, and only as needed to run the app.

AI providers on your plan receive data only when the app makes a request for your store. IndexNow passes page URLs to Bing, Yandex and other IndexNow search engines; it is used only for pages the app changed for you, or when you choose to send your product pages.

Our servers and database are in Germany. Some sub-processors, including the AI providers and Amazon SES, process data in the United States.

• All traffic to and from the app is encrypted with TLS
• Shopify access tokens are stored encrypted; the app uses Shopify's short-lived, refreshing tokens
• Database backups are encrypted before they leave our server
• Every request from the app in your Shopify admin is checked against a Shopify-signed session token
• Each store's data is kept separate and is deleted along with the store

This part explains how Vosaire collects, uses and protects data through the Shopify app Vosaire: ChatGPT AI Ads Agent(“the app”). The app connects a store to OpenAI's ChatGPT Ads: it sends the store's product feed, sends sales and shopping events so ads can be measured, creates and manages ads in the merchant's own ad account, and shows profit.

It covers (A) Merchants, the store owners and staff who use the app, and (B) Shoppers, visitors and customers of a merchant's store. The app never talks to shoppers directly. For shopper data, the merchant is the data controller and we process it on the merchant's behalf. OpenAI runs ChatGPT Ads under the merchant's own agreement with OpenAI; data the app sends to the merchant's ad account is handled by OpenAI under its own terms and privacy policy.

Your visit to vosaire.com itself is covered by the website section of this policy.

The app installs read-only and collects only what its features need, through the Shopify permissions below.

• Product feed: for each product and variant, its ID, title, description, link, brand, store name, photo, price, availability and barcode, per market. No customer data.
• Campaigns and ads you create or approve, with their targeting, bids and budgets.
• Conversion events (Conversions API):online-store orders from the last 7 days (order ID, items, total, time, checkout page) so OpenAI can measure which ads led to sales. To match a sale to an ad click, an event may include OpenAI's ad-click identifiers and, when Shopify provides them with the order, the customer's email, phone and name hashed with SHA-256, their country, IP address and browser user agent. These are passed on and not stored by us. Add-to-carts and checkouts started are sent only when OpenAI's own cookie is present, which its pixel sets only after the shopper allowed analytics and marketing; they carry no contact details. Test, POS and draft orders are never sent.
• Customer audiences (Pro, only if you turn one on): hashed emails, as described above.

OpenAI deduplicates events from the pixel and our server by event ID, so a sale is counted once. You can turn audiences off in the app at any time, and the pixel off in your theme editor.

• To build and send your product feed and manage your ads in your ad account
• To measure sales from ChatGPT ads and show spend, sales and profit
• To let the agent suggest or make changes within the limits you set
• To write ad titles and product drafts for you to review
• To send you reports and alerts by email, which you can turn off
• To handle billing through Shopify, answer your support requests, keep the app secure and fix problems

We do not sell your data or shoppers' personal information, and we do not use one store's data for another store's ads. The agent learns only from your own store's results.

The app's own AI work (ad titles, product drafts, the agent's explanations and answers to your questions) sends store information, product data, aggregate ad results and your messages to the agent to our AI model provider: Anthropic by default; OpenAI may also be used. Prompts never contain shopper personal data. We do not use your data to train or fine-tune any AI model. The AI only proposes: fixed rules in our code decide what the agent may change, and every change stays within your limits.

AI-generated content can be wrong. Review ad titles and drafts before you apply them.

• While the app is installed, we keep your data so the app can show trends and profit over time.
• When you uninstall, the app's access tokens are deleted at once and the app stops reading your store and sending events. Your ads and feed stay in your OpenAI ad account, which you control.
• 48 hours after uninstall, Shopify sends the shop/redact request and we delete everything the app holds about your store, including your encrypted OpenAI keys. If you reinstall before then, nothing is deleted.
• Copies of Shopify webhook payloads are emptied after 30 days, and the log rows deleted after 90 days.
• Customer data exports (Section 7.7) are deleted once you mark them sent, or after 90 days.
• Encrypted database backups expire on a fixed schedule: most within 4 months, with one yearly copy kept for up to 2 years. Deleted data disappears from backups as they expire.

• customers/data_request: we prepare an export of what the app holds about that customer (their orders as stored) and email you, so you can send it to them.
• customers/redact: we remove that customer's personal data from stored orders, refunds and webhook logs, and delete the storefront events and visits linked to them. Sales totals stay, without personal data. Data already sent to OpenAI is handled by OpenAI under its own policy.
• shop/redact: we delete all of the store's data, as in Section 7.6.

Each request is recorded with its 30-day due date. Who a request was about is stored encrypted and removed once it is handled.

We share data only with the services below, and only as needed to run the app.

Our servers and database are in Finland (EU). OpenAI, the AI providers and Amazon SES process data in the United States.

• All traffic is encrypted with TLS
• Shopify tokens and OpenAI keys are stored encrypted; the app uses Shopify's short-lived, refreshing tokens
• Database backups are encrypted before they leave our server
• Every request from the app in your Shopify admin is checked against a Shopify-signed session token
• Each store's data is kept separate and is deleted along with the store