Privacy Policy

1. What this policy covers

This policy explains what information ShopMeta collects, why, and what we do with it. It covers the people who use ShopMeta, meaning account holders and their team members, and visitors to our website.

It does not cover our customers' own customers. If you bought something from a store that uses ShopMeta, that store decides how your information is used and is responsible for it. We handle it only on the store's instructions, under our Data Processing Addendum. Please contact the store first. If you contact us, we will pass your request to the store.

2. Our two roles

3. Information we collect about you

• Account details. Your name, email address, organization, role and groups. Your password is stored only as a salted hash, never in readable form. If you sign in with Google, we receive your name, email address and profile picture from Google.
• What you do in the product. The questions you ask and the answers, files you upload, and the dashboards, automations, notes and instructions you save.
• Records of activity. Your sign-in sessions, a log of changes to your team and its access, and a log of requests made by AI tools connected to your account: which tool, what it asked for, and when.
• Technical details. Your IP address and browser type, which we use for security and to limit repeated sign-in attempts, and server logs.
• Billing details. None today: paid plans are not yet charged. When they are, payment will be handled by a payment processor, and we will not store card numbers.
• Messages. What you send us when you write to support.

We do not buy information about you from data brokers.

4. Information we process for our customers

When a customer connects a source, ShopMeta reads data from it to answer that customer's questions. Depending on the source, this can include their customers' names, email addresses, phone numbers, postal addresses, what was ordered and for how much, the payment method used (never full card numbers), and shipping and tracking details.

• Where it sits. The data stays in the customer's own systems, or in a data warehouse we host for them.
• When we read it. At the moment a question is asked, a dashboard is opened, or a scheduled report runs.
• What we keep. Answers appear in saved chats, dashboards and reports, so personal data that an answer contains is stored with them. Results are also cached for five minutes.

5. How we use information

• To provide the service. Signing you in, applying your organization's access rules, answering questions, running dashboards and scheduled reports.
• To send service emails. Invitations, password resets, and the reports and alerts your organization sets up. We do not send marketing email without your consent.
• To keep the service secure. Detecting abuse, limiting repeated sign-in attempts, and investigating incidents.
• To support you when you ask for help.
• To monitor quality and improve the service. We review how the service is answering, including questions, answers and feedback, to find poor results and correct them. What we learn from an organization's use is applied to that organization and is not passed to another. We also use statistics that do not identify you.
• To meet legal obligations.

We do not sell personal information, share it for targeted advertising, or use it to train general-purpose AI models. We do not make decisions about you by automated means that have legal or similarly significant effects.

6. AI processing

To answer a question, ShopMeta sends the question and the data needed for the answer to an AI model provider, currently Anthropic. The provider processes it to return the answer. Under the provider's commercial terms it may not train its models on this data, and it states that it deletes what it receives and returns within 30 days by default.

• Your organization's own key. If your organization connects its own account with the model provider, that provider handles the data under your organization's agreement with it.
• AI tools you connect. If you connect an AI tool of your choice to ShopMeta, the provider of that tool receives the data the tool requests and handles it under its own terms.

7. Who we share information with

Providers that help us run the service. They may use the information only to provide their service to us.

The list we keep current is Annex III of the Data Processing Addendum.

Your organization. Your owners and admins can see your team's activity. A chat you share is visible to the people you share it with.

At your organization's direction. The services it connects, the channels it sends reports to, and the AI tools its people connect.

For legal reasons. When the law requires it, or to protect the rights, property or safety of ShopMeta, our customers or others. Where the request concerns a customer's data, we will tell the customer first unless the law forbids it.

A change of ownership. If ShopMeta is involved in a merger or sale, information may transfer to the new owner under this policy. We will give notice.

8. Where information is processed

ShopMeta is based in the United States and stores and processes information there. One provider is an exception: Anthropic may process a question in another region where it operates. ShopMeta is offered to businesses in the United States and is not directed at people in the European Economic Area, the United Kingdom or Switzerland.

9. How long we keep information

10. How we protect information

• In transit. All connections to ShopMeta are encrypted.
• Saved credentials. The credentials for connected sources are encrypted with AES-256-GCM.
• Passwords. Stored only as salted hashes.
• Separation. Each organization's data is kept apart from every other organization's.
• Access rules. Roles and groups decide who can use each connection and each store, and they are checked on every request.
• Read-only connections. ShopMeta reads warehouses and databases; it cannot change them.
• Servers. Protected by a firewall that admits only web traffic and administrative access by key.

No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

11. Your rights

Depending on where you live, you may have the right to:

• see the information we hold about you, and receive a copy;
• have it corrected or deleted;
• object to or restrict how we use it;
• withdraw consent where we rely on it.

California residents also have the right to know what we collect and why, to delete and correct it, and not to be treated differently for using these rights. We do not sell or share personal information as California law defines those terms.

To use any of these rights, write to admin@shopmeta.ai. We will confirm who you are and reply within 30 days. If your information is in a store's data rather than your own account, contact that store.

12. Cookies

ShopMeta uses only the cookies needed to sign you in and keep you signed in. It uses no advertising or analytics cookies and no third-party trackers. If that changes, we will update this policy and ask for consent where the law requires it.

13. Children

ShopMeta is for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from children.

14. Changes to this policy

We will post changes here with a new effective date. For a change that materially affects you, we will give at least 30 days' notice by email or in the product.

15. Contact

Orange Meta AI, 1111 Oakfield Dr, Ste 115-2538, Brandon, FL 33511, United States. Email: admin@shopmeta.ai.