Application: CartSavior AI ·
Last updated: September 13, 2026
1. Overview
CartSavior AI ("the App") is a Shopify application developed by TingStudio AI. This Privacy Policy explains how the App collects, uses, stores, and discloses merchant and customer data. By installing the App on your Shopify store, you agree to the practices described in this policy.
This App is an independent product and is not affiliated with, endorsed by, or sponsored by Shopify Inc.
2. Data We Collect
2.1 Merchant Data (from your Shopify store)
Store information: store domain, plan, time zone, currency, primary locale
Order data: orders created after the App is installed (used only to attribute cart recoveries)
Customer data: shopper chat messages sent through the App widget (the App does not collect shopper names, email addresses, or payment information)
Discount configuration: the discount strategy you configure inside the App dashboard
2.2 Data You Provide
Store knowledge text entered in the App settings (e.g., shipping policy, return policy, FAQ)
Static discount codes you enter in the App settings
2.3 Data We Do NOT Collect
Shopper payment information (credit cards, billing addresses)
Shopper email addresses or phone numbers
Shopper passwords or account credentials
3. How We Use the Data
We use collected data solely to operate the App:
Product & store data: to enable the AI chat assistant to answer shopper questions accurately about products in the cart
Chat messages: to power the real-time AI conversation between shoppers and the App
Order data: to attribute which orders were recovered through the App, and to display recovery statistics in the merchant dashboard
Discount data: to generate or apply the discount codes offered to shoppers
We do not sell, rent, or share merchant data with any third party except as described in this policy.
4. Third-Party Services
The App relies on the following third-party services:
Service
Purpose
Data Shared
Shopify
Store API access
Shop, product, order, and cart data
Neon PostgreSQL
Database storage
Encrypted merchant and conversation data
Vercel
Application hosting
Runtime traffic (no persistent data)
DeepSeek AI
AI conversation generation
Anonymized chat prompts + product context (shopper identities are not shared)
All third-party providers are contractually bound to appropriate data protection standards.
5. Data Storage & Security
All data is stored in encrypted PostgreSQL databases hosted by Neon (with AES-256 encryption at rest and TLS in transit).
Access to production data is restricted to authorized personnel of TingStudio AI.
Shopify session tokens and access tokens are stored securely and rotated according to Shopify's best practices.
We follow industry-standard security practices to protect your data, but no system is completely secure.
6. Data Retention
Active merchant accounts: data is retained for as long as the App is installed on your store.
After uninstallation: all chat logs, generated discount codes, and conversation history are permanently deleted within 30 days of uninstallation. Store configuration data (discount strategy, store knowledge) is deleted immediately.
Backup retention: encrypted backups are retained for up to 30 days for disaster recovery purposes.
7. Shopper Data Rights (GDPR Compliance)
The App fully supports Shopify's Customer Privacy API and responds to the following mandatory webhooks:
customers/data_request — When a shopper requests their data, the App returns all chat conversation records associated with that shopper.
customers/redact — When a shopper requests deletion, the App permanently deletes all chat conversations associated with that shopper.
shop/redact — When a store is closed and data redaction is requested, the App permanently deletes all data associated with that store.
These webhooks are implemented and operational as of the App's launch date.
8. Your Rights as a Merchant
You may at any time:
Export your data via the App dashboard
Revoke the App's access by uninstalling it from your Shopify admin (which triggers automatic data deletion per Section 6)
The App is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to merchants via the email address associated with their Shopify account, or through the App dashboard.
11. Contact
For any questions, data requests, or concerns regarding this Privacy Policy: