Privacy Policy

1. Information We Collect

We may collect the following types of information:

1.1 Information You Provide Directly

You may provide information to us when you contact us through forms, email, or chat, request a demo, quote, or support, sign up for an account or subscribe to our Services, share product data, store data, FAQs, documents, policies, or other content for chatbot setup and training, or communicate with us regarding billing, support, or service customization.

This information may include your name, email address, phone number, company or store name, billing details, account credentials, business information, customer support communications, and any other information you choose to provide.

1.2 Information Collected Automatically

When you use our website or Services, we may automatically collect certain technical and usage information, such as IP address, browser type and version, device type, operating system, referral source, pages viewed, time spent on pages, date and time of visits, clickstream and usage activity, chatbot interaction data, log data, and diagnostic information.

1.3 Information Received Through Shopify

When a merchant installs goodChatBot on a Shopify store, we may access and process information through Shopify APIs as required to provide the functionality enabled by the merchant.

This may include:

• store information, products, collections, inventory information, and store content;
• Shopify metafields and other product or store metadata;
• customer information, including name, email address, phone number, and shipping or billing address, where required for customer support, order-related assistance, or display to authorized merchant staff within the goodChatBot admin or inbox;
• order, fulfillment, shipping, cart, and related transactional information; and
• other Shopify data necessary to answer customer questions, provide merchant-configured chatbot functionality, or operate the Services.

We access and use Shopify data only as necessary to provide the functionality requested or configured by the merchant and in accordance with applicable Shopify permissions and requirements.

1.4 Information from Connected Apps, Integrations, and Third-Party Services

Merchants may connect goodChatBot with third-party platforms, Shopify apps, APIs, CRMs, or other services. When an integration is enabled, goodChatBot may receive, retrieve, process, or send information through that integration as necessary to provide the merchant-configured functionality.

Depending on the integration, this information may include:

• product, collection, inventory, compatibility, or availability information;
• FAQs, policies, store content, and other knowledge-base information;
• customer communications and support information;
• order, shipping, fulfillment, or return-related information;
• reviews, product options, app-specific metafields, or other app-generated data;
• CRM or customer-support information;
• platform metadata, configuration settings, and other information made available through the connected service.

goodChatBot may also send information or requests to connected services when required to perform merchant-configured actions, such as retrieving information, updating supported data, triggering an approved workflow, or completing another integration-specific action.

We process information from connected services only as necessary to provide the applicable integration and goodChatBot functionality configured by the merchant.

1.5 End Customer Data (Storefront Chat Users)

When goodChatBot is installed on a merchant's Shopify store, we may collect and process data from end customers (shoppers) who interact with the chat widget. This may include:

• Name and email address, when provided voluntarily during the chat session or obtained through Shopify when the customer is logged in or associated with an order
• Phone number or other contact information, when voluntarily provided by the customer through chat, for example when requesting a callback, or when available through Shopify for customer support purposes. Phone numbers may be displayed to authorized merchant staff in the goodChatBot admin or inbox interface to assist with customer support
• Shipping or billing address and related information, when accessed through Shopify for order-related support or displayed to authorized merchant staff in the goodChatBot admin or inbox interface
• Chat conversation content and history
• Order and fulfillment information accessed during the chat session or by authorized merchant staff to respond to customer queries and provide support
• IP address and approximate location, such as country, region, or city
• Cart information during the shopping session
• Page URLs where the chat interaction occurred
• Customer-uploaded media files, such as images, videos, screenshots, or other attachments shared through the chat

goodChatBot acts as a data processor in this context, processing end customer data on behalf of the merchant (the data controller). This data is processed only as necessary to provide, operate, secure, support, and improve the chat service for the applicable merchant. It is not used for advertising or marketing purposes.

Customer-uploaded media files

If an end customer shares an image, video, or other attachment through the chat, we store it temporarily in secure cloud storage for the purpose of allowing the merchant/admin team to review and respond to the customer query.

Customer-uploaded media files are stored in private storage, are not publicly accessible, and are encrypted at rest. Access is provided only through time-limited secure URLs generated on demand for authorized users.

By default, customer-uploaded media files are retained for up to 30 days and are then deleted automatically.

We do not maintain separate backups or version history for customer-uploaded media files. These files are deleted according to our retention policy, unless earlier deletion is required by law, merchant request, or applicable privacy request.

2. How We Use Information

We use the information we collect to provide, operate, maintain, secure, and improve the Services.

We aim to collect and process only the information reasonably necessary to provide the Services and to support merchant-requested chatbot, order lookup, admin review, reporting, troubleshooting, security, and related functionality.

We do not collect or process end customer personal information unless it is reasonably necessary to provide the Services, respond to customer queries, support merchant-requested functionality, maintain security, troubleshoot issues, comply with legal obligations, or protect our rights.

We may use your information to set up, configure, train, and customize your chatbot; improve chatbot accuracy, workflows, and customer experience; respond to inquiries, requests, and support needs; process transactions and manage billing; monitor service usage, performance, and security; troubleshoot issues and fix errors; improve our website, features, and service offerings; send service-related communications; send transactional email notifications to merchant staff regarding new customer chat sessions, human assistance requests, and conversation activity, where the merchant has opted in to email notifications; send transactional email replies to end customers on behalf of merchant staff, where the customer has provided their email address voluntarily and the merchant has enabled this feature; send marketing communications to merchants, prospective merchants, or other business contacts where permitted by law; end-customer chatbot data is not used for marketing or advertising; comply with legal obligations; and protect our rights, systems, users, and business.

3. AI and Chat Data

goodChatBot may process chatbot conversations, prompts, responses, support content, store content, and interaction logs in order to deliver chatbot responses, improve the accuracy, relevance and operation of the chatbot service provided to the applicable merchant, monitor system performance, identify errors, abuse, or misuse, and support analytics, reporting, and troubleshooting.

Because AI systems may require data processing to function effectively, you should avoid providing sensitive or regulated personal information through the Services unless you have appropriate legal permission and safeguards in place.

3.1 End Customer Chat Processing

End customer data described in Section 1.5 is processed as necessary to provide and support the chat service for the applicable merchant. This includes generating AI responses, maintaining conversation history, enabling merchant staff to review and respond to conversations, and supporting order lookup and account-related queries.

We do not use end customer data for advertising or marketing. End customer data is processed only as necessary to provide, operate, secure, support, and improve the chat service for the applicable merchant.

3.2 AI Sub-processor

Chat conversation content may be transmitted to OpenAI through its API to generate chatbot responses. OpenAI acts as a service provider/sub-processor for this processing. OpenAI does not use API inputs or outputs to train its models by default unless the API customer explicitly opts in to data sharing. OpenAI processes such information in accordance with its applicable terms, data processing commitments, and privacy documentation. For details, please review https://openai.com/en-GB/policies/row-privacy-policy/

3.3 Anonymous and Guest Chat

Merchants may configure goodChatBot to allow anonymous chat sessions. In this mode, customers are not required to log in or identify themselves upfront.

If a merchant disables anonymous mode, customers are required either to be logged in to their store account or to provide their name and email address through a guest form before the chat session begins.

If an anonymous or guest customer requests order-related information, they may be asked to provide information such as their email address and order number to locate and validate the relevant order.

Previous conversation history is not displayed to anonymous or guest customers based solely on an email address. Merchant staff with authorized access to the goodChatBot admin may view relevant customer conversation history and associated information for customer-support purposes.

Access to certain customer-specific information may require additional identity verification where such verification is available or required.

3.4 End Customer Rights

End customers whose data is processed through the goodChatBot widget may have the following rights depending on their location and applicable law:

• Access - the right to know what personal data has been collected or processed
• Correction - the right to request correction of inaccurate personal data
• Deletion - the right to request deletion of their personal data
• Restriction or objection - the right to request restriction of, or object to, certain processing where applicable
• Portability or copy - the right to request a copy of their personal data in an applicable format where required by law
• Withdrawal of consent - where processing is based on consent, the right to withdraw that consent

End customers should direct privacy requests to the merchant whose store they interacted with, as the merchant is the data controller responsible for handling such requests. goodChatBot, acting as data processor, will support merchants in fulfilling these requests.

Where goodChatBot receives a deletion request through Shopify's applicable privacy or compliance mechanisms, the relevant customer data will be deleted or anonymized within 30 days, unless retention is required by applicable law.

For privacy concerns that cannot be resolved with the merchant, end customers may contact us directly at info@automatikly.com.

4. Cookies and Similar Technologies

Our public website may use analytics, advertising, cookies, pixels, and similar technologies to understand website usage, improve performance, and support marketing activities, subject to applicable consent requirements.

The goodChatBot storefront chat service may also use cookies, local storage, or similar technologies that are necessary or useful for providing the chat experience. These technologies may be used to:

• maintain a chat session and conversation state;
• remember customer preferences, such as language or chat settings;
• recognize a returning browser or continue an existing conversation where appropriate;
• maintain technical and security-related session information; and
• monitor performance, reliability, and errors to help operate and improve the chat service.

These technologies are used to provide, secure, personalize, and improve the chatbot experience. goodChatBot does not use end-customer chatbot data for advertising or cross-context behavioral marketing.

Where applicable law requires consent for non-essential cookies or similar technologies, such technologies are used subject to the applicable merchant configuration and consent requirements.

5. How We Share Information

We do not sell end customer personal data or share it for cross-context behavioral advertising. We may share information in the following circumstances:

5.1 Service Providers and Sub-processors

We may share personal information and end customer data with trusted third-party service providers and sub-processors who help us operate, maintain, secure, and improve the Services.

These service providers may include, without limitation, cloud hosting providers, cloud storage providers, database providers, AI processing providers, email and communication providers, analytics providers, payment processors, monitoring and security providers, and other technical service providers required to deliver the Services.

These service providers and sub-processors are permitted to process personal information only as necessary to provide services to us or to support the functionality requested by merchants. We do not permit our service providers to use end customer data for their own advertising or marketing purposes.

Where applicable, we use contractual, technical, and organizational safeguards designed to protect personal information processed by our service providers and sub-processors.

For AI-related processing, please see Section 3.2.

5.2 Third-Party Integrations

If you choose to connect third-party apps, platforms, or services, information may be shared as necessary to enable those integrations and related functionality.

5.3 Legal and Compliance Reasons

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to comply with legal obligations, enforce our terms and agreements, protect our rights or property, prevent fraud, abuse, or security threats, or protect the safety of users or the public.

5.4 Business Transfers

If goodChatBot is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

5.5 Merchant Access

End customer chat data described in Section 1.5 is accessible to the merchant whose store the customer interacted with. Merchants may view conversation history, customer identity (where provided), and associated order information through the goodChatBot admin dashboard. Merchants are responsible for ensuring their access to and use of this data complies with applicable privacy law.

6. Data Retention

We retain information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal, tax, accounting, or reporting obligations, resolve disputes, prevent fraud or security incidents, and enforce our agreements.

Merchant account, billing, and administrative information may be retained for as long as the merchant account remains active and for an appropriate period thereafter where required for legal, tax, accounting, reporting, dispute-resolution, security, or contractual purposes.

End customer personal data is retained for no longer than 24 months following the customer's most recent interaction with goodChatBot, unless a shorter plan-specific retention period applies or longer retention is required by applicable law, security, fraud prevention, dispute resolution, or another legitimate legal requirement. A new customer interaction may restart this retention period where continued retention is necessary to provide conversation continuity and customer support.

After the applicable retention period, customer-identifying information such as name, email address, phone number, address, customer identifiers, order identifiers, and other direct identifiers is deleted or anonymized. Conversation content is deleted or anonymized where it contains information that can reasonably identify or be linked to the customer.

Anonymous or aggregated information, such as aggregate chatbot usage, attributed-order counts, revenue analytics, product interactions, and service-performance statistics, may be retained where it can no longer reasonably be associated with an identifiable individual.

Security and access logs may be retained indefinitely for security, audit, and compliance purposes. Customer-identifying information within those logs is deleted or irreversibly anonymized after 24 months, after which the logs are retained only in a form that can no longer reasonably be associated with an identifiable customer.

Some subscription plans may have shorter retention periods for conversation history, as described in the applicable pricing or plan information. Where such a shorter retention period applies, the corresponding conversation data is deleted or anonymized according to that plan's retention terms.

Customer-uploaded media files, including images, videos, screenshots, and other attachments shared through chat, are retained for up to 30 days and then deleted automatically, unless they are deleted earlier in response to an applicable privacy request.

Upon merchant account termination, or following receipt of Shopify's applicable shop redaction request after app uninstall, associated personal data is deleted or anonymized within the applicable required timeframe, unless retention is required by law or remains necessary for security, fraud prevention, dispute resolution, or compliance purposes.

Individual end customer data deletion requests are processed within 30 days of receipt through Shopify's applicable privacy mechanisms, a merchant request, or a direct request to info@automatikly.com

7. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information and protected customer data against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include encryption in transit, encryption at rest, private storage for customer-uploaded media files, role-based access controls, limited staff access to protected customer data, access logging, secure authentication practices, environment separation between production and testing systems, and monitoring for security issues.

Customer-uploaded media files are stored in private cloud storage and are accessed only through time-limited secure URLs generated for authorized users.

Where backups containing personal data are maintained, such backups are encrypted.

However, no system or method of transmission over the internet is completely secure. We cannot guarantee absolute security.

7.1 Security Incidents and Breach Notification

In the event of a security incident or personal data breach affecting information we process, we will take appropriate steps to contain, investigate, assess, and remediate the incident.

Where we process personal data on behalf of a merchant, we will notify the affected merchant without undue delay after becoming aware of a personal data breach, as required by applicable law and our contractual obligations, and will provide reasonable assistance to support the merchant's breach-response obligations.

Where goodChatBot acts as a data controller and applicable law requires notification to a supervisory authority or affected individuals, we will make such notifications within the legally required timeframe.

We maintain an internal incident-response procedure designed to identify, contain, investigate, document, and address security incidents promptly.

8. Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to access personal information we hold about you, request correction of inaccurate information, request deletion of your information, object to or restrict certain processing, withdraw consent where processing is based on consent, request a copy of your data where applicable, and opt out of marketing communications.

To exercise these rights, please contact us using the contact details below.

8.1 Merchant Responsibilities

Merchants who install or use goodChatBot are responsible for:

• Informing their customers that a third-party AI chat service is used on their store.
• Providing any privacy notices, disclosures, or consent mechanisms required by applicable law in their jurisdiction before or during customer interactions.
• Handling end customer data rights requests, including access, correction, deletion, portability, or objection requests, received from their customers.
• Configuring the app in compliance with their own privacy, security, and data protection obligations.

Where a merchant enables consent notices, disclaimers, guest chat, or other privacy-related settings in goodChatBot, we will apply those settings as configured by the merchant.

goodChatBot provides tools to support privacy-related deletion requests, including deletion through Shopify's privacy webhook mechanisms where applicable.

For merchants using goodChatBot, this Privacy Policy, together with our Terms of Use and any applicable Data Processing Addendum or service agreement, describes the roles, responsibilities, scope of processing, retention practices, and safeguards applicable to personal data processed through the Services.

8.2 Automated Decision-Making

goodChatBot uses AI to generate chat responses but does not make any automated decisions with legal or significant effects on customers. AI-generated responses are informational in nature and do not determine eligibility, pricing, access to services, or any other consequential outcomes for end customers.

9. Third-Party Links and Services

Our website or Services may contain links to third-party websites, services, or tools. We are not responsible for the privacy practices, security, or content of those third parties. Your use of third-party services is subject to their own policies and terms.

10. Children's Privacy

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age required by applicable law. If we become aware that we have collected such information unlawfully, we will take reasonable steps to delete it.

11. International Data Transfers

goodChatBot is operated by Automatikly Business Pvt. Ltd. Our primary production infrastructure, including databases and file storage, is hosted in the United States. Personal information may also be accessed and processed in India by authorized personnel where necessary to operate, maintain, support, secure, and improve the Services.

We also use authorized service providers and subprocessors, including cloud infrastructure and artificial intelligence service providers, which may process personal information in the United States or other countries in which they operate.

Our merchants and their customers may be located around the world. As a result, personal information may be transferred to and processed in countries other than the country where it was originally collected. These countries may have data protection laws that differ from those of the individual's home country.

Where applicable law requires additional safeguards for international transfers of personal information, we implement appropriate legally recognized transfer mechanisms, which may include adequacy decisions or recognized adequacy frameworks, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, and other approved transfer mechanisms, as applicable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date.

Where required by applicable law, we will provide additional notice of material changes to this Privacy Policy.

13. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy, please contact us at

Automatikly Business Pvt. Ltd.
Email: info@automatikly.com.
Registered office: Sy. No. 97, F. No. 4092 Bellandur Village, Bellandur, Bangalore, Karnataka, India - 560103
US correspondence address: 1177 Branham Ln, San Jose, CA 95118, USA