Privacy Policy

1. Who this applies to

This policy covers two groups: the store owners and staff who use the Recommendor dashboard ("you"), and the shoppers who visit stores that have installed Recommendor ("shoppers"). Store owners are responsible for their own privacy notice to their shoppers; this policy explains what Recommendor itself does with data on their behalf.

2. Data we sync from your store

When you connect a store, Recommendor syncs a copy of the following, kept current automatically:

• Catalog data — products, categories, and pages, including titles, descriptions, prices, images, and stock levels.
• Order data — order line items, totals, timestamps, and status, used for recommendations, forecasting, and retention scoring.
• Customer data — the customer records your store already holds (such as name, email, and order history), used to personalize recommendations, send the emails you configure, and score retention and lapse risk.

This sync is read-only: Recommendor never writes back to your store's catalog, orders, or customer records. Your storefront platform remains the source of truth.

3. Data collected directly on your storefront

• Shopping assistant conversations — messages a shopper sends to the AI shopping assistant, and any conversation a member of your team takes over.
• Session recordings — page interactions on your storefront, when this feature is enabled, subject to the masking rules in Section 5.
• Email engagement — whether a recovery, alert, or win-back email was sent, opened, or clicked.
• Usage and device data — basic technical data (such as browser type and page context) needed to serve recommendation blocks, search results, and analytics.

4. Per-store data isolation

Every store's catalog, orders, customers, and recordings are logically isolated from every other store's, including other stores managed under the same agency or partner account. Staff and partner users see only the stores they've been granted access to.

5. Session recording privacy rules

Where session recording is enabled, the following rules are always on and are not configurable off:

• Password fields and payment fields are always masked and never captured in the recording.
• Sessions belonging to your own staff (for example, while testing your storefront) are never recorded.
• Shoppers who have enabled Do Not Track, or an equivalent browser signal, are never recorded.

6. How we use data

• To sync and rank your catalog for recommendations and search.
• To power the AI shopping assistant, using your catalog and the shopper's conversation.
• To send the abandoned cart, product alert, and retention/win-back emails you configure.
• To generate demand forecasts and retention/lapse-risk scoring from order history.
• To show you analytics on what each feature earned, attributed on the rules described on our site.
• To operate, secure, and improve Recommendor, and to provide support.

7. Sub-processors

We use a limited number of sub-processors to provide the service. Sub-processors only receive the data needed to perform their function and are bound by contract to protect it.

• LLM provider — [LLM provider name] processes shopper messages and relevant catalog context to generate shopping assistant responses.
• Email provider — [email provider name] delivers the recovery, alert, retention, and account emails sent from Recommendor or on your behalf.
• Infrastructure providers — [hosting/infrastructure provider name(s)] host the databases and application infrastructure that store and process the data described in this policy.

A current list of sub-processors, and notice of any change, is available on request — see Section 11. Our Data Processing Agreement covers sub-processor obligations in more detail; see the DPA page.

8. Retention

We retain synced catalog, order, and customer data for as long as your account is active, so the sync stays current and historical reporting remains accurate. Session recordings are retained for [retention period, e.g. 90 days] before being automatically deleted. Shopping assistant conversation logs are retained for [retention period] to support quality review and, where enabled, staff takeover. Billing records are retained for as long as required by applicable tax and accounting law.

9. Data deletion on account closure

When you close your account or disconnect a store, we stop syncing new data immediately and delete the store's synced catalog, order, customer, session recording, and conversation data within [deletion period, e.g. 30 days], except where we're required to retain limited records (such as billing history) for longer under applicable law. You can request deletion sooner, or request a copy of your data before deletion, by contacting us as described in Section 11.

10. Your rights

Depending on where you or your shoppers are located, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Store owners should direct their shoppers' requests to Recommendor through the dashboard or by contacting us directly, and we'll assist consistent with our Data Processing Agreement. You can exercise your own rights as described in Section 11.

11. Contact

For privacy questions or requests, contact us via our contact page or at [privacy/support email]. Recommendor is provided by [Company legal name], [company address].

12. Changes to this policy

We may update this policy as Recommendor's features or sub-processors change. Material changes will be announced through the dashboard or by email before they take effect.