AALAI Shopify App Privacy Policy

Company: R R R Codebiz Private Limited
Application: AALAI for Shopify
Website: https://www.rrrcodebiz.com/
Effective Date: 31 October 2026
Last Updated: 31 October 2026

1. Introduction

R R R Codebiz Private Limited ("RRR Codebiz", "we", "our", or "us") is committed to protecting the privacy and personal information of merchants who use the AALAI Shopify application and of shoppers who interact with it on Shopify storefronts.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when AALAI is installed on a Shopify store. It is the privacy notice applicable to AALAI's Shopify integration.

For general privacy provisions that apply across the AALAI platform, please also read the AALAI Privacy Policy.

2. Scope of This Policy

This Privacy Policy covers:

Shopify merchants who install and authorize AALAI.
Store owners and staff members who use AALAI within the Shopify admin.
Shoppers who interact with the AALAI shopping assistant on a merchant's Shopify storefront.
Merchants and shoppers communicating with our support team about AALAI.

Shoppers should also review the privacy policy of the merchant whose store they are visiting.

3. About the AALAI Shopify Application

AALAI is an AI-powered shopping assistant designed to help Shopify merchants improve their customers' shopping experience.

Its features include:

AI-powered product discovery.
Product recommendations.
Conversational shopping assistance.
Product-related question answering.
Merchant knowledge and FAQ management.
Shopify product catalogue integration.
Storefront shopping assistant functionality.

4. Shopify Merchant Information

When a merchant installs and authorizes AALAI, we may access and process information permitted by the Shopify permissions granted to the application. For merchants, this information may include:

Shopify store name and domain.
Shopify store identifiers.
Merchant authorization information, including the access credentials Shopify issues when the merchant authorizes AALAI through Shopify's OAuth process.
Application installation information.
Application subscription information.

When a store owner or staff member opens AALAI in the Shopify admin, we may receive their Shopify user identifier, name, email address and whether they are the store owner. We use this to link them to the store's AALAI workspace.

Subscriptions to the AALAI Shopify application are billed through Shopify. We keep subscription records such as the plan, the subscription status, the billing period and the Shopify subscription reference. We do not receive merchants' payment-card details for Shopify billing.

5. Shopify Store Information

Depending on the permissions granted, AALAI may access and process the following store information:

Product names and descriptions.
Product images and variants.
Product pricing and inventory information.
Product availability.
Relevant order information, where authorized.

AALAI accesses Shopify information only to provide its intended functionality and according to the permissions granted to the application.

We do not request Shopify checkout payment-card details for AI shopping assistant functionality.

6. Shopify Shopper Information

When shoppers interact with AALAI on a Shopify storefront, the application may process:

Customer questions.
Product search queries.
Shopping preferences voluntarily shared.
Conversation messages.
Relevant conversation context.
Product recommendations and AI-generated responses.
Relevant customer information associated with orders, where authorized and approved.
Relevant order information, where authorized.

This information is processed to provide relevant product information and shopping assistance.

Shoppers can sign in to the assistant using Google sign-in or their Shopify customer account. If a shopper signs in, we process the shopper's email address and display name. To show a signed-in shopper the status of their own orders, we use the order's email address and Shopify customer identifier to confirm that the orders belong to that shopper. Order information shown to a shopper may include order numbers, dates, status, items, totals and shipment tracking details.

For signed-in shoppers, AALAI may use shopping preferences and purchase patterns derived from their order history to personalize recommendations. Signed-in shoppers can view, remove or pause these personalization preferences in the assistant.

AALAI does not request shoppers' phone numbers or postal addresses from Shopify. Information that shoppers choose to type into a conversation is processed as part of that conversation.

7. Merchant-Provided Information

Merchants may provide information to configure their AI shopping assistant, including:

Frequently asked questions.
Product information.
Store policies.
Business descriptions.
Other relevant knowledge content.

This information helps AALAI provide relevant responses to shoppers.

8. How We Use Shopify Information

We use Shopify information for the following purposes:

To provide and operate the AALAI Shopify application.
To authenticate merchants and maintain secure access.
To provide product discovery, recommendations and shopping assistance.
To answer shoppers' questions about products and their own orders, where authorized.
To provide AI-powered functionality.
To manage application installation, subscriptions and billing.
To provide technical support and customer assistance.
To monitor application performance and reliability.
To detect security threats, fraud, and unauthorized activities.
To handle Shopify privacy requests and comply with legal requirements.

We aim to collect and process only information that is reasonably necessary for the relevant service or purpose.

9. Artificial Intelligence Processing

AALAI uses artificial intelligence services to provide automated assistance and related functionality. Relevant information may be processed by AI service providers to generate responses and product recommendations.

OpenAI

AALAI uses OpenAI services for AI-powered conversational responses and related functionality.

Depending on the request, information sent for processing may include:

Customer questions.
Relevant product information.
Merchant-provided knowledge.
Relevant conversation context.
Relevant order information for signed-in shoppers asking about their own orders, where authorized.
Shopping preferences, including preferences derived from order history for signed-in shoppers.

Any personal information that a shopper chooses to include in a message forms part of the conversation and may be sent for processing; information typed into a conversation is not automatically removed before processing. Shoppers' email addresses and Shopify customer identifiers used to confirm order ownership are not included in the order information sent for processing.

We send information necessary to fulfil the requested AI functionality.

Information processed by third-party AI providers is subject to their applicable service terms and privacy policies.

We do not intentionally send payment-card information, passwords, or authentication secrets as AI prompts.

10. Shopify API Access

AALAI accesses Shopify through Shopify's application programming interfaces, using only the permissions that the merchant reviews and approves when installing the application. These permissions relate to the store's products, inventory and storefront assistant and, where enabled, to order information that lets signed-in shoppers check their own orders.

AALAI accesses Shopify information only to provide its intended functionality and according to the permissions granted to the application.

11. Third-Party Service Providers

We use third-party service providers to operate, maintain, and support the AALAI Shopify application. These providers include:

Shopify: for authorized ecommerce store integrations, product information, and application functionality (https://www.shopify.com/).
OpenAI: for AI-powered processing and response generation (https://openai.com/).
Amazon Web Services (AWS): for application hosting, infrastructure, storage, and related technical services (https://aws.amazon.com/).
Qdrant: for vector database and information retrieval functionality used by AI-powered applications (https://qdrant.tech/).
Google: for authentication, email communications, and other applicable business services (https://www.google.com/).

We share information with service providers only as necessary for the relevant services and operations, subject to applicable contractual and privacy obligations. We do not sell personal information to third parties for monetary consideration. Section 8 of the AALAI Privacy Policy describes the other circumstances in which we may disclose information.

12. Data Storage and Security

We use reasonable technical and organizational safeguards designed to protect personal information, as described in section 9 of the AALAI Privacy Policy. These include encryption of information during transmission and restricted access to infrastructure and application data.

The Shopify access credentials issued to AALAI are stored in encrypted form.

Our production infrastructure may use cloud hosting services, including AWS infrastructure located in India.

Although we take reasonable precautions, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. Shopify Privacy Requests

For AALAI, Shopify merchants and customers may submit applicable privacy requests through the Shopify-required privacy mechanisms or contact us directly. Shopify forwards certain privacy requests to AALAI, and we handle them as described below.

13.1 Customer Data Access Requests

When a customer asks a merchant for their data and Shopify sends us the request, we record it and identify the information we hold about that customer for the store. Data export requests are handled manually by our team: we prepare the customer's information and provide it to the merchant. We aim to respond within the applicable 30-day deadline.

13.2 Customer Data Deletion Requests

When Shopify sends us a customer data deletion request, we delete the customer records we hold for that store that match the customer's email address, together with their associated AALAI conversations, preferences and sign-in sessions.

Some information may not be deleted automatically: conversations that were not linked to a signed-in customer, records we cannot match to the customer's email address, and records the customer also used at another store that still has AALAI installed. These are retained for review. Customers or merchants may contact us to request their deletion.

13.3 Shop Data Deletion Requests

After a merchant uninstalls AALAI, Shopify sends us a shop data deletion request (Shopify currently sends this 48 hours after uninstallation). When we receive it, we delete shopper records associated with the store, shopper sign-in sessions and catalogue information derived from the store, and remove the stored Shopify access credentials.

The following information is currently retained after a shop data deletion request: merchant-provided knowledge content and its search index, assistant configuration, conversations not linked to a signed-in shopper, the store's installation record, and subscription, billing, usage and audit records. Merchants may contact us to request deletion of retained information, subject to section 16.

14. Uninstalling the Application

When a merchant uninstalls AALAI, we remove the stored Shopify access credentials, disable the storefront assistant for that store, and sign out shoppers who were signed in to the assistant on that store.

Uninstalling AALAI does not by itself delete all information. Store, shopper and merchant information is retained until Shopify sends the shop data deletion request described in section 13.3, and some information is retained after that request as described there.

Merchants can also request deletion of their AALAI workspace by contacting us using the details in section 20.

15. Data Retention

We retain Shopify-related information only for as long as necessary for the purposes for which it was collected, subject to applicable legal, contractual, security, and operational requirements.

Shopify-related information is generally kept while AALAI remains installed on the store, and is then deleted or retained as described in sections 13 and 14. Retention may also depend on the type of information, the purpose for which it is processed, applicable legal obligations, and security and dispute-resolution requirements.

When personal information is no longer required, we will take appropriate steps to delete or anonymize it, subject to applicable legal requirements and backup retention practices.

16. Exceptions to Deletion

Certain information may need to be retained where required by law, for legitimate security purposes, or to resolve disputes. This may include subscription and billing records and security and audit records.

Deleted information may also remain in backup copies for a limited period until those backups expire.

17. Merchant and Shopper Privacy Rights

Depending on applicable laws and their location, merchants and shoppers may have rights to:

Request access to personal information.
Request correction of inaccurate information.
Request deletion of personal information.
Obtain information about data processing.
Withdraw consent where processing is based on consent.
Object to certain processing activities.
Request restriction of processing where applicable.
Submit complaints to relevant data protection authorities.

Shoppers may submit requests to the merchant whose store they used, and the merchant can make the request through Shopify. Merchants and shoppers may also contact us directly using the details in section 20.

We may request identity verification before processing certain privacy requests.

18. General Provisions

The following sections of the AALAI Privacy Policy also apply to the AALAI Shopify application:

International Data Transfers (section 12).
Cookies and Similar Technologies (section 14).
Children's Privacy (section 15).
Third-Party Websites (section 16).

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the AALAI Shopify application, our business operations, technology, Shopify requirements, or legal requirements.

The updated policy will be published on our official website with a revised effective date.

We encourage merchants and shoppers to review this page periodically.

20. Contact and Privacy Requests

For questions, complaints, or requests relating to personal information processed through the AALAI Shopify application, please contact:

Company: R R R Codebiz Private Limited
Website: https://www.rrrcodebiz.com/
Email: support@rrrcodebiz.com

For AALAI-specific requests, please use the subject:

Privacy Request – AALAI

Registered Legal Entity: R R R Codebiz Private Limited
Registered Business Address: A 321, Master Mind 4, Royal Palms, Aarey Milk Colony, Goregaon East, Mumbai – 400065, Maharashtra, India

We will review and respond to requests in accordance with applicable legal requirements.