Privacy Policy

1. Information We Collect

We may collect the following types of information:

• Personal Information: Such as your name, email address, and contact details provided during signup or when contacting us.
• Store Data: Including your Shopify store ID, domain, and relevant data needed to deliver our services (e.g., cart and customer engagement information).
• Usage Data: Technical data like IP address, browser type, device information, app usage logs, and analytics insights.

2. Controller and Processor Roles

These two roles carry different obligations, and GoPrimy occupies both depending on the data:

• We are the controller for merchant account data — the details you give us when you sign up, billing information, and how you use the GoPrimy dashboard.
• We are a processor for your customers’ personal data. When our AI employees read an order, answer a question, or send a message, they act on your instructions and under your policies. You remain the controller of that data.

Merchants processing personal data of individuals in the EU, EEA, or UK can request a Data Processing Agreement from us before connecting a store.

3. How We Use Your Information

We process your information to:

• Operate and maintain the GoPrimy platform
• Tailor and improve the performance of our services
• Offer customer support and respond to your inquiries
• Monitor security and detect or prevent fraudulent activity
• Fulfill legal, regulatory, or contractual obligations

4. Automated Processing and AI

GoPrimy’s core function is automated. You should understand exactly what that means:

• Content sent to AI models: To generate replies and decide on actions, we send relevant context — conversation history, order and cart details, product information, and your configured policies — to third-party large language model providers. This can include personal data such as a customer’s name, email address, phone number, and what they wrote to you.
• Not used to train external models: We use these providers under agreements that prohibit using your data to train their models.
• Stored context: We store embeddings of store and conversation content so employees can retrieve relevant history. These are deleted when you disconnect your store.
• Actions taken automatically: AI employees can send messages and issue discounts within the limits you configure. Anything outside those limits is escalated to you rather than executed. You can pause any employee at any time.

5. Data Sharing and Disclosure

We do not sell your personal information. Your data may be shared with:

• Service providers and subprocessors: We use OpenAI (AI text generation), Pinecone (vector storage for retrieval), Resend (email delivery), Meta’s WhatsApp Business Platform (WhatsApp messaging), Google (Gmail integration where you connect it), Stripe (payments), Heroku (hosting), and Segment and Umami (website analytics). Each is bound by contractual confidentiality and data-protection obligations.
• Legal and Regulatory Authorities: When required to comply with applicable laws or to protect our legal rights

6. Data Security

We take data security seriously. GoPrimy uses industry-standard security protocols, including encryption, secure data storage, and access controls. While we strive to protect your data, no digital platform can guarantee absolute security.

7. Data Retention

Your data is retained only for as long as necessary to fulfill the purposes stated in this Policy. When data is no longer needed, it is securely deleted or anonymized. You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request corrections or updates to your information
• Request deletion of your data (where legally permissible)
• Object to or restrict certain data processing activities

To exercise any of these rights, please contact us at contact@goprimy.com.

9. Third-Party Services

GoPrimy integrates with Shopify and other third-party tools. Please note that their privacy practices are governed by their own privacy policies. We encourage users to review those policies to understand how your data may be handled externally.

10. Children's Privacy

GoPrimy is intended for business use and is not directed at children under the age of 13. We do not knowingly collect personal information from minors. If we become aware that such data has been collected, we will take prompt action to delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or product offerings. When updates are made, we will revise the "Effective Date" above and notify users of material changes via email or in-app messaging.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us: