Privacy
Last updated: [DATE] · Controller: [LEGAL ENTITY NAME], [ADDRESS]
Who this covers
Two different groups, with different relationships to us.
Merchants — the people who sign up for Attendant. We are the data controller for your account information.
Shoppers — people visiting a store that uses Attendant. For their data we are a processor acting on the merchant's instructions; the merchant is the controller. If you are a shopper wanting your data removed, contact the store you visited, and they can action it through us.
What we collect from shoppers
Only what the widget needs to do its job:
- A random identifier stored in the browser, so a returning visitor is recognised. It is not linked to a real identity unless the merchant's store tells us who they are.
- Pages viewed, products viewed, cart value, and how long was spent on a page.
- Referrer and campaign parameters, where present in the URL.
- Approximate country, derived from the connection. No precise location.
- Messages sent in a conversation, and video or audio if a call is recorded — recording is off unless the merchant turns it on and the participants are told.
- Name and email, only if the merchant's store passes them to us because the shopper is signed in.
We do not use any of this to build profiles across different merchants' stores. A shopper's identifier on one store has no connection to their identifier on another.
Consent
Each merchant chooses how consent is handled on their store. Where they select "Ask first", nothing is stored in the browser and no behaviour is recorded until the shopper accepts. Decisions are recorded so the merchant can evidence them.
How long we keep it
- Conversations and messages: for as long as the merchant's account is active, unless they delete them sooner.
- Session and page events: [RETENTION PERIOD, e.g. 13 months].
- Recordings: only if enabled, and only for the retention period the merchant sets.
- Consent records: [RETENTION PERIOD].
- When a merchant uninstalls, we receive a deletion request from Shopify 48 hours later and remove their store's data.
Who else sees it
We do not sell data and we do not share it with advertisers. It is processed by:
- Our hosting provider, [PROVIDER], in [REGION].
- Shopify, where the merchant's store is on Shopify.
- Any integration the merchant chooses to enable in their settings, such as an AI provider or an email service. That is their choice and their configuration.
Where it is processed
Our servers are in [REGION]. If you are in the EU or UK, that may mean your data is transferred outside your region; we rely on [TRANSFER MECHANISM, e.g. Standard Contractual Clauses].
Your rights
If you are in the EU, UK, or a jurisdiction with comparable law, you can ask for access to your data, correction, deletion, a portable copy, or that we stop processing it. Shoppers should contact the store they visited; merchants can contact us at [EMAIL]. We respond within 30 days.
Security
Credentials merchants enter are encrypted before storage. Access to production data is limited to people who need it. We have not yet completed a formal security certification, and we would rather say so than imply one.
Contact
[EMAIL] · [POSTAL ADDRESS]
[IF APPLICABLE: EU or UK representative under Article 27]