Privacy Policy

IFG AI Chat processes only the data needed to provide the configured widget and AI chatbot. The merchant remains the controller for their storefront visitors; IFG eCommerce acts as processor for service delivery where applicable.

Service providers

• Google Cloud / Firestore / Vertex AI — europe-west1
• OpenAI — GPT-5 nano
• Resend — transactional email
• Shopify — platform and Admin GraphQL API

Retention and rights

• Conversations are kept for 30 days, then permanently deleted — never anonymized and kept beyond that.
• You can request export or deletion of your store’s data at any time through Shopify.

Welcome email

After a new installation we send one single welcome email to the email address of the store owner’s Shopify account, which we read from Shopify’s Admin API at install time (the public contact email of the store is never used). We also read the store name, to address you. The email is sent by Francesco Guiducci (IFG eCommerce), thanks you for installing the app, introduces him as its freelance developer and invites you to reply with any question. It is a service message, not a newsletter or a promotion, and nothing else is sent afterwards. It is delivered through Resend (United States). Transfer safeguards: the standard contractual clauses (Commission Decision 2021/914) included in Resend’s data processing addendum, and Resend’s certification to the EU-U.S. Data Privacy Framework. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for the introduction, legitimate interest (Art. 6(1)(f) GDPR). You can object at any time by replying to the email, using the unsubscribe link in the email, or writing to info@ifgecommerce.com. The owner’s email address is not stored in our records. After uninstall and the erasure request (shop/redact) we keep only a minimal record: the store’s .myshopify.com domain, the sending status with dates and, for anyone who unsubscribed, the date of the objection and a keyed cryptographic fingerprint (HMAC-SHA256) of the address. The fingerprint is pseudonymised, not anonymous, and only prevents sending again and honours the objection (Art. 21 GDPR). It is deleted after 24 months.

Security

Shopify tokens remain server-side. Webhooks are authenticated, database access is backend-only, and visitor IP addresses are never stored in clear text.

Third-party trademarks

IFG AI Chat is not affiliated with, sponsored by, or endorsed by WhatsApp LLC or Telegram FZ-LLC. Trademarks belong to their respective owners.

Contact

info@ifgecommerce.com