TingStudio AI

Privacy Policy

Application: CartSavior AI  ·  Last updated: September 13, 2026

1. Overview

CartSavior AI ("the App") is a Shopify application developed by TingStudio AI. This Privacy Policy explains how the App collects, uses, stores, and discloses merchant and customer data. By installing the App on your Shopify store, you agree to the practices described in this policy.

This App is an independent product and is not affiliated with, endorsed by, or sponsored by Shopify Inc.

2. Data We Collect

2.1 Merchant Data (from your Shopify store)

• Store information: store domain, plan, time zone, currency, primary locale
• Product data: product titles, descriptions, variants (size, color, etc.), prices, inventory status
• Order data: orders created after the App is installed (used only to attribute cart recoveries)
• Customer data: shopper chat messages sent through the App widget (the App does not collect shopper names, email addresses, or payment information)
• Discount configuration: the discount strategy you configure inside the App dashboard

2.2 Data You Provide

• Store knowledge text entered in the App settings (e.g., shipping policy, return policy, FAQ)
• Static discount codes you enter in the App settings

2.3 Data We Do NOT Collect

• Shopper payment information (credit cards, billing addresses)
• Shopper email addresses or phone numbers
• Shopper passwords or account credentials

3. How We Use the Data

We use collected data solely to operate the App:

• Product & store data: to enable the AI chat assistant to answer shopper questions accurately about products in the cart
• Chat messages: to power the real-time AI conversation between shoppers and the App
• Order data: to attribute which orders were recovered through the App, and to display recovery statistics in the merchant dashboard
• Discount data: to generate or apply the discount codes offered to shoppers

We do not sell, rent, or share merchant data with any third party except as described in this policy.

4. Third-Party Services

The App relies on the following third-party services:

Service	Purpose	Data Shared
Shopify	Store API access	Shop, product, order, and cart data
Neon PostgreSQL	Database storage	Encrypted merchant and conversation data
Vercel	Application hosting	Runtime traffic (no persistent data)
DeepSeek AI	AI conversation generation	Chat prompts + product context (shopper names and emails are not included in prompts)

All third-party providers are contractually bound to appropriate data protection standards.

Data Processing Agreement: TingStudio AI acts as a data processor on behalf of the merchant (the data controller). A Data Processing Agreement (DPA) is available upon request at support@tingstudioai.com.

5. Data Storage & Security

• All data is stored in encrypted PostgreSQL databases hosted by Neon (with AES-256 encryption at rest and TLS in transit).
• Access to production data is restricted to authorized personnel of TingStudio AI.
• Shopify session tokens and access tokens are stored securely and rotated according to Shopify's best practices.
• We follow industry-standard security practices to protect your data, but no system is completely secure.

6. Cookies and Tracking

The App itself does not set any cookies on the shopper's browser, nor does it use any tracking pixels, beacons, or similar technologies.

The App operates through Shopify's Storefront API and the merchant's existing theme, which may set their own cookies as described in the merchant's own privacy policy. Any cookies set by the Shopify storefront are governed by the merchant's and Shopify's respective privacy policies, not by this Privacy Policy.

7. Data Retention

• Active merchant accounts: data is retained for as long as the App is installed on your store.
• After uninstallation: all chat logs, generated discount codes, and conversation history are permanently deleted within 30 days of uninstallation. Store configuration data (discount strategy, store knowledge) is deleted immediately.
• Backup retention: encrypted backups are retained for up to 30 days for disaster recovery purposes.

8. Shopper Data Rights (GDPR Compliance)

The App fully supports Shopify's Customer Privacy API and responds to the following mandatory webhooks:

• customers/data_request — When a shopper requests their data, the App returns all chat conversation records associated with that shopper.
• customers/redact — When a shopper requests deletion, the App permanently deletes all chat conversations associated with that shopper.
• shop/redact — When a store is closed and data redaction is requested, the App permanently deletes all data associated with that store.

These webhooks are implemented and operational as of the App's launch date.

9. Your Rights as a Merchant

You may at any time:

• Export your data via the App dashboard
• Revoke the App's access by uninstalling it from your Shopify admin (which triggers automatic data deletion per Section 7)
• Request a copy of all data we hold about your store by emailing support@tingstudioai.com

California Residents (CCPA): If you are a California resident, you have the right to know what personal information is collected, to request deletion of your personal information, and to opt out of any "sale" of personal information. TingStudio AI does not sell personal information. To exercise these rights, contact support@tingstudioai.com.

10. Children's Privacy

The App is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to merchants via the email address associated with their Shopify account, or through the App dashboard.

12. Contact

For any questions, data requests, or concerns regarding this Privacy Policy:

TingStudio AI
Email: support@tingstudioai.com
Website: https://www.tingstudioai.com