Your customers' privacy
At a glance
- What you get
- Know which customer data the app handles and how to respond to a data request.
- Time
- 5 minutes
- Plan
- All plans
Before you start
This page explains how the app works in plain words. It isn’t legal advice. The binding text is the privacy policy. For your store’s visitors you are the data controller; IFG eCommerce processes data on your behalf to run the service.
Contact widget (all plans)
When a visitor taps the WhatsApp or Telegram button, the app opens the messaging app with your number or username. From there the conversation happens on WhatsApp or Telegram, not in the app. On the Free plan the app doesn’t store any visitor data on its own servers.
AI chatbot (Grow and Unlimited)
What the visitor sees. The chat window always shows the note “AI-generated answers: please verify anything important.”. Answers about price and availability are checked on your store when given, but remain information to confirm at checkout.
What is stored.
- The conversation’s messages, for 30 days. Then they’re permanently deleted, not anonymised and kept.
- The email address, only if the visitor leaves it: when the chatbot can’t answer and collection is on, a box appears with the “Your email” field and the “I agree to be contacted by email” checkbox. The Send button only works with the box ticked and the email typed in. The visitor can press “No thanks, continue” and keep chatting. The email is also kept for 30 days.
- The visitor’s IP address is never stored in readable form. The app keeps only a transformed, unreadable version, used to limit abuse.
Who processes the messages. To write the answers, messages go through the AI engine, which also processes data outside the European Union under Standard Contractual Clauses. Notification emails reach you through an email delivery service. The list of providers is in the privacy policy.
Tip: mention IFG AI Chat and the chatbot in your store’s privacy policy, so customers know an AI chat answers on your behalf.
When a customer asks for their data or for deletion
Customers make these requests to you, and Shopify forwards them to the installed apps. You don’t need to do anything in the app.
- Data access request. The app looks up leads with the customer’s email and the linked conversations, and sends everything to the address set in Merchant email. That’s why the merchant email is required.
- Deletion request. The app permanently deletes leads with the customer’s email and the linked conversations.
Note: a conversation where the customer didn’t leave their email can’t be linked to a person. It’s deleted after 30 days anyway.
Warning: if the Merchant email is wrong you receive neither leads nor the data for access requests. Check it in Settings with Send test email.
Troubleshooting
A customer wants their chat deleted right away. Ask them to submit a data deletion request to your store: Shopify forwards it to the app, which deletes leads with their email and the linked conversations.
I didn’t get the email with the data for an access request. Check the address in Settings and your spam folder. If the problem persists, contact support.