Privacy Policy – getFreddy

2. Who this policy is for

• Merchants who install the getFreddy Shopify app.
• Shoppers / site visitors ("Users") who chat with the bot on a merchant's store.
• Website visitors ("Site Visitors") who browse getFreddy.app.

3. Information we collect

3.1 From Merchants

• Store details – shop domain and contact email.
• Custom greetings & messages saved in the app.
• Bot instructions or policies you provide.

3.2 From Users (store shoppers)

• Chat messages typed by the user and the bot's replies.
• Product or checkout links the bot sends and the user clicks.
• No IP addresses – we intentionally do not collect or store shoppers' IP addresses.

3.3 From Site Visitors (getFreddy.app)

• Usage & browsing data – pages viewed, clicks, referrer URL, approximate location, browser/OS details. Collected via cookies and Google Analytics.
• Advertising identifiers (e.g., Google Ads cookies) to measure and improve our performance-targeted ads.
• We do not combine this data with shopper chat data, and we do not attempt to re-identify individuals.

4. How we use the information

• To power the chatbot and answer customers' questions.
• To display merchant-provided greetings, messages and policies.
• To improve the bot – our team may review chats to ensure accuracy and safety.
• To analyse traffic on getFreddy.app and optimise our marketing, including running performance-targeted ads.

We never sell or rent your data to anyone.

5. Service providers & data sharing

We rely on trusted partners:

• OpenAI, L.L.C. – processes chat messages to generate responses. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, then deletes them (unless you are approved for Zero-Data-Retention). See OpenAI's API Data Usage Policy.
• Google LLC – provides Google Analytics and Google Ads. Google Analytics sets cookies to provide aggregate reports on site usage and ad performance. See Google's Privacy & Terms.

Other than the above, we only disclose information when required by law.

6. Data retention & deletion

• Merchants & Users: We keep data while the merchant has an active subscription (free or paid). When the merchant uninstalls getFreddy, we delete all merchant and user data within 14 days.
• Site Visitors: Google Analytics records are retained for up to 26 months and then aggregated or deleted.
• Merchants can request deletion sooner by emailing us.

7. Cookies & tracking choices

We use first-party cookies for session management and third-party cookies (Google Analytics/Ads) for analytics and advertising. Most browsers let you block or delete cookies; doing so will not affect the chatbot but may affect analytics accuracy and ad personalisation.

8. Security

We protect data using encryption in transit (HTTPS) and at rest, access controls and regular security reviews. No system is 100 % secure—contact us immediately if you believe your data has been compromised.

9. Region-specific notices

European Economic Area & United Kingdom (GDPR)

Our legal bases are (a) performance of a contract (providing the chatbot to merchants) and (b) legitimate interests (maintaining and improving getFreddy, marketing our services). We rely on merchants to obtain any end-user consents required. If we cannot identify a user (because we do not keep IP addresses), GDPR Art. 11 allows us to decline unverifiable requests.

California residents (CCPA/CPRA)

We do not "sell" or "share" personal information as those terms are defined by the CCPA/CPRA. You have the right to know, delete and correct your personal information and to be free from discrimination for exercising these rights.

10. Changes to this policy

We may update this policy occasionally. We will post updates here and notify merchants by email if changes are significant.

11. Contact us

Please reach out via our contact page