Legal
Privacy Policy
Last updated: December 9, 2025
getFreddy ("the App") provides an AI-powered chatbot and operations assistant ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
Personal information the App collects
When you install the App, we are automatically able to access certain types of information from your Shopify account:
| API Permission | Purpose |
|---|---|
| read_locations, read_inventory | Access to location and inventory data enables the chatbot to provide accurate stock information and help identify inventory trends. |
| read_orders | Access to order history allows the chatbot to perform order status lookups for customers and generate reports for merchants. |
| read_legal_policies | Ingesting store policies (refunds, shipping, privacy) ensures the chatbot provides accurate answers. |
| read_products, unauthenticated_read_product_listings | Access to product catalog data allows the chatbot to answer product-related questions and provide recommendations. |
| read_content, read_themes | Access to store content and theme settings helps the chatbot understand your brand voice and integrate seamlessly with your storefront. |
| unauthenticated_write_checkouts | Required to generate direct checkout links, allowing customers to easily purchase products discussed in chat. |
Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:
- Information about you and team members who access the App on behalf of your store: shop domain, contact email, configuration settings (including custom bot instructions and greeting messages).
- Information about individuals who interact with the chatbot: chat messages and bot responses, order numbers or emails provided for status lookups, interaction metrics (e.g., clicks on products, cart reminders), and anonymous session identifiers.
We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:
- Local Storage (Chatbot Widget): We store a list of recently viewed products locally on your device for up to 7 days to personalize chatbot greetings. This data is processed exclusively in your browser and is never transmitted to our servers.
- Local Storage (Merchant Dashboard): Used to remember your entered shop domain for convenience.
- Server Logs: Our hosting infrastructure (Vercel) automatically collects IP addresses, browser type, referring URLs, and timestamps for security and performance monitoring.
How we use your personal information
- Service delivery: Answering customer inquiries, providing order status updates, generating inventory and revenue reports for merchants, and creating direct checkout links.
- Service improvement: Analyzing logs to fix bugs, improve response accuracy, and monitor system performance.
We do not use merchant data to train our own machine learning models and we do not sell your data to third parties.
Your rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
For Merchants: You act as the Data Controller for your account data and as a Data Processor for your customers' data. getFreddy acts as a sub-processor.
For Shoppers: The Shopify store you interact with is the Data Controller. getFreddy processes your information on behalf of the merchant.
If you are a European resident we process your information to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Your information will be transferred outside of Europe, including to Australia and the United States. Residents of the European Economic Area (GDPR), United Kingdom, and California (CCPA/CPRA) have specific rights regarding access, rectification, erasure, and restriction of processing. Please contact us or the relevant merchant to exercise these rights.
Data retention
We retain data for the duration of your installation of getFreddy. Upon uninstallation, we schedule your shop data (including chat logs, reports, and analytics) for deletion within 14 days, subject to technical feasibility. We keep a minimal log of your shop app installation/uninstallation date for record keeping purposes, unless and until you ask us to delete this information.
Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy [at] getfreddy [dot] app, or by mail using the details provided below:
getFreddyLevel 3, 100 Harris Street
Pyrmont NSW 2009
Australia
C/O WeWork Reception Desk