Privacy Policy

How we handle your data — in plain English. Your data is hosted in the UK and we never train AI on your content.

1. Who we are

Talk Shop provides an AI support agent for online stores. When you use our website or embed our widget, we act as the data controller for your account data and as a data processor for the messages your customers send your bot.

2. What we collect

Your account details (email), the content you connect to a bot (scraped pages and uploaded documents), your bot configuration, and the messages exchanged with your bot. We keep usage metrics to power your dashboard.

3. Where your data lives

Your data is hosted in the United Kingdom, and we are GDPR-first by design. We do not use your content or your customers' messages to train AI models. Content is sent to our language-model provider only to generate an answer, under contractual terms that prohibit training on it.

4. How we use it

To run your bot, show you analytics, provide support, and keep the service secure. We do not sell your data, and we only share it with the processors needed to deliver the service: hosting (Supabase, UK region), our language-model provider (OpenAI), payment processing (Stripe) and transactional email (Resend).

If a merchant connects their Shopify store, Shopify acts as an additional processor for that store only: when a visitor asks about their order, we fetch the order's status from Shopify at that moment to answer the question, and we do not store the order data.

5. Your rights

You can access, correct, export or delete your data at any time from your dashboard or by contacting us. Deleting a bot removes its indexed content; deleting your account removes your personal data, subject to legal retention requirements. Unclaimed draft bots delete themselves automatically after 72 hours. You also have the right to complain to the ICO.

6. Contact

Questions about your data? Email privacy@talkshop.example.