Privacy Policy

Who we are and what this policy covers

Absliq Systems Private Limited provides the Absliq website, AI shopping assistant, Shopify app and support automation services. This policy covers visitors, merchants and people who interact with an Absliq-powered chat on a merchant’s store.

For website inquiries, account administration, billing and security, Absliq determines how information is used. For a merchant’s catalog, shopper conversations and connected support information, we generally process information on that merchant’s instructions. The merchant determines the purposes of its customer service and remains responsible for its own privacy notice. Contact the store first about its handling of your information; you can also contact us for assistance.

Information we process

Website and business contacts: information you provide when emailing us or requesting a demo, such as your name, email address, store URL, product interest and meeting details. Our website does not currently run third-party advertising or audience analytics trackers.

Merchant accounts: store domain and identifiers, authorized installation credentials, app settings, plan and subscription status, billing periods, usage totals and support correspondence. Shopify processes Shopify app payments; we do not collect your full payment card details through the app.

Catalog information: product and variant identifiers, descriptions, options, images or image URLs, prices, currency, availability and other catalog attributes used to answer product questions. We create searchable indexes and embeddings from relevant catalog content.

Chat and support information: messages and AI replies, conversation and browser-session identifiers, timestamps, product recommendations, clicked product links and associated event identifiers. Where available, a Shopify logged-in customer identifier may be associated with a conversation. A browser session is not necessarily anonymous or proof of a person’s identity.

If a merchant enables additional support channels or actions, we process the contact details, message or attachment metadata, ticket information and connected service records required for those features. We do not access every merchant system merely because the Shopify app is installed. Infrastructure providers may also process IP addresses, request information and diagnostic or security records to deliver and protect the service.

How and why information is used

We use information to authenticate installations, synchronize and search catalogs, maintain chat context, generate replies, perform merchant-authorized support tasks, show transcripts and service analytics, measure plan usage, provide assistance, investigate faults and abuse, and fulfill privacy requests and legal obligations.

Where a legal basis is required for our own processing, we rely on performing our agreement with you, legitimate interests in operating and securing the service and responding to inquiries, legal obligations, or consent where required. Merchants are responsible for the legal basis and any consent required for their shopper-facing use.

We do not sell personal information or use merchant and shopper information for cross-store advertising profiles. Customer information is used to provide the service to the relevant merchant, rather than for unrelated advertising.

AI processing and service providers

We use Amazon Web Services for hosting, database, storage and related infrastructure, and OpenAI’s API for relevant AI generation and embeddings. Relevant portions of a question, recent conversation, catalog or support context may be sent to the AI provider to produce an answer. Avoid sending payment card numbers, passwords, government identifiers or other sensitive information through chat.

Shopify provides the app platform, installation and subscription services. Calendly processes scheduling information when you choose to open the website’s demo scheduler. Enabled email, messaging or merchant integrations also process information needed for their connected functions. Authorized personnel and infrastructure/support providers may access information when needed to operate, support or secure the service.

Providers process information under their applicable terms and account settings. AI-provider retention is separate from our application retention schedule. We do not promise zero provider retention or storage exclusively in one country. Contact us for the current service-provider and processing-location details relevant to your installation.

Retention

Conversation history, linked context and attachment references are scheduled for deletion after 90 days without activity. An open support ticket is retained while open; its conversation becomes eligible after closure and 90 days without further activity. Individual product-click records are retained for 30 days. Prepared customer-data exports expire after seven days or earlier when marked delivered.

Completed queue payloads are normally removed immediately and otherwise retained for up to seven days; failed queue payloads are retained for 14 days after final failure. Catalog processing details follow seven-day completed and 14-day failed schedules; small status records may remain to support readiness and retries. Superseded catalog versions are eligible for deletion seven days after a newer version is successfully activated.

Response caches are cleared after 90 days. Minimal billing usage and store-level daily counts are retained for up to 365 days, with usage extended where necessary to finish an active billing period. These counts do not retain chat text or shopper/session identifiers. Store-scoped counts are removed on store deletion. Minimal completed deletion receipts are retained for 365 days; unresolved deletion work is kept until resolved. Operational identifiers in these receipts are restricted records, not anonymous data.

Deletion runs periodically and storage failures are retried. Operational logs, provider records and isolated recovery backups follow separate security and recovery schedules, rather than the live-chat schedule. Backup copies may remain until their scheduled expiry; they are not used for ordinary service access, and deletion requests must be reconciled before restored data is served. Contact us for current infrastructure retention details. We may retain specific records where legally required or necessary for a documented dispute or security investigation, with access and use limited to that purpose.

Business inquiries and account correspondence are kept while needed to respond, manage the relationship or meet applicable legal obligations. Separate accounting records may need longer statutory retention; that does not justify retaining shopper chat content.

Uninstalling and requesting deletion

Uninstalling the Shopify app disables its service and starts cancellation of queued work and removal of installation credentials. Shopify’s subsequent store-erasure notification initiates deletion of the store’s application data, catalog indexes and managed catalog files. A later authenticated reinstall is treated separately so delayed notifications do not erase the new installation.

Merchants can manage Shopify customer export and deletion requests in the app’s Privacy requests page. We match known customer identifiers where possible. Guest or shared-browser conversations may require the merchant to verify the relevant sessions before export or deletion; we do not treat an unmatched guest as proof that no data exists. Merchants securely deliver prepared exports to the verified requester.

Deleting information from Absliq does not delete the merchant’s original Shopify records or copies held independently by email, messaging or other connected providers. Contact the merchant or those providers about their own records.

Cookies, international processing and security

Our Cookie Policy describes website preferences, the chat session identifier and third-party scheduling storage. Identifiers can be personal information even when they do not contain a name. Merchant analytics and any required consent must be addressed in the merchant’s privacy and consent settings.

We operate from India and use providers that may process information in other countries. Where required, appropriate contractual or other lawful transfer arrangements must apply. We limit access to authorized purposes and use authentication and tenant-scoped access controls. No service can guarantee absolute security.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability or restriction, object to processing, withdraw consent where consent is the basis, or complain to the relevant supervisory authority. Withdrawal does not affect earlier lawful processing. We may need to verify identity and coordinate with the merchant before acting, and we respond within the applicable legal deadlines. We do not require a paid plan to handle a privacy request.

The merchant-facing service is intended for business users and is not directed at children. If you believe a child has supplied information that should not be held, contact the merchant or us. We update this policy when practices change and provide notice of material changes as required.

Contact Absliq