KINDERAI / PRIVACY POLICY
Privacy Policy
Information about KinderAI, store data and privacy enquiries.
Who is responsible
KinderAI is operated by Andreas Christofi, an individual, at Meli Charalambous, 3117 Limassol, Cyprus. Privacy enquiries: [email protected]. KinderAI provides tools for Shopify merchants to help shoppers and review store conversations. A merchant determines how its store uses shopper information. KinderAI processes shopper information to provide the merchant’s configured service; the merchant’s privacy notice also applies. KinderAI is responsible for information used to manage its own support enquiries and merchant service relationship.
Information and sources
KinderAI processes store identity and settings, product information, shopper messages, conversation records, voluntarily supplied lead contact details, support requests, and app subscription and credit-usage records. Shopify-connected aggregate analytics depend on the app’s approved access. Where a store has enabled order lookup and granted the required Shopify access, KinderAI uses the signed-in customer’s identifier to retrieve their matching order number, payment and fulfillment status, carrier, tracking number and tracking link. This feature is conditional on store configuration and access. Otherwise, order help directs shoppers to their secure store account or confirmation email.
Do not submit passwords, payment-card details or sensitive personal information in chat. Payment details for app subscriptions are handled by Shopify, not by KinderAI’s chatbot.
How information is used
These features help answer shopper questions, supply store context, maintain conversation history, surface buying friction, suggest merchant actions, generate store recommendations and handle support. Merchants remain responsible for deciding what changes or offers to approve. Contact details supplied for a follow-up are used for that request; submitting a question does not itself subscribe a shopper to a marketing list. Merchants are responsible for obtaining any consent needed for their own marketing.
AI processing and service providers
OpenAI processes the message and relevant store context needed to generate AI answers, summaries and recommendations. Product questions can therefore send shopper text and selected store information to OpenAI. Automated answers may be inaccurate and should not be used for decisions with legal or similarly significant effects.
If voice input is enabled for a store and a shopper grants microphone access, their recorded clip is sent to OpenAI for transcription. The shopper can review and edit the transcript before sending it as a chat message. KinderAI’s transcription handler does not save the audio clip in its database; provider processing remains subject to the provider’s policies. Replies remain text.
Railway hosts the app, Supabase/PostgreSQL stores app records, and configured Pusher channels deliver real-time support and handoff events. Shopify supplies the installation, store API and app-billing services. Providers receive the information needed for their respective functions. This notice does not promise zero provider retention or that all processing stays in Cyprus.
Retention, deletion and uninstall
Saved conversations, captured leads and support tickets support the merchant’s use of KinderAI. The retention targets are 90 days after the last conversation message, 180 days after a lead is captured, and 12 calendar months after a support ticket is closed or its later activity. These periods are KinderAI policy choices, not Shopify-required periods. Scheduled cleanup is being rolled out; these targets are not a guarantee that an existing record has already been automatically deleted.
Open support matters, unresolved privacy requests and documented disputes or legal holds can affect deletion. Subscription, credit-purchase and adjustment records are handled separately from conversation history because they support balances, billing enquiries and financial obligations. Backup, provider and security-record retention are separate from these targets; contact us for the arrangements applicable to your request.
To request deletion or a copy of your information, use Privacy requests in KinderAI or email [email protected] with your store domain and request. This email route remains available after uninstalling and on Free. Shoppers should contact the relevant merchant first. We may need to verify identity and coordinate the request with the merchant and relevant providers.
Uninstalling, changing a plan or hiding a conversation does not mean all copies have been erased. Shopify privacy requests are handled separately from plan limits. Clearing server records does not remotely remove browser-stored history; see the browser-storage information below.
Processing locations and safeguards
KinderAI is operated from Cyprus in the European Economic Area. The service uses the providers described above; operating from Cyprus does not mean all data remains in Cyprus or the EEA. Hosting, AI processing, support and provider operations may involve processing outside the EEA, depending on the service and its configured region.
Provider processing terms and applicable transfer arrangements are relevant to these transfers. For information about the current regions, provider terms or safeguards applicable to your store, contact [email protected]. This notice does not claim an EU-only deployment, zero provider retention or a particular backup-expiry period.
Your choices and privacy requests
Contact [email protected] for access, correction, deletion, restriction, objection or portability requests where these rights apply. If processing relies on consent, you may withdraw that consent; withdrawal does not undo earlier lawful processing. You may complain to your competent data-protection authority, including the Cyprus Commissioner for Personal Data Protection.
Shoppers should normally contact the merchant whose store they used. KinderAI assists merchants with verified requests. Merchants can use Privacy requests inside the app or email us, including after uninstalling or while on the Free plan. We may ask for information needed to verify identity and the relevant store. Do not email passwords or access tokens.
Partner portal and affiliate records
The partner portal has a separate Partner Privacy Notice covering account and application information, referral reports, Shopify transaction observations, Google Analytics / BigQuery installation exports, submitted PayPal addresses, internal commission and adjustment records, and payment testing.
Read the portal’s Partner Privacy Notice for details about partner records and processing.