Echo-Mart Agent Privacy Policy

Effective date: July 22, 2026

Echo-Mart Agent provides an AI-assisted shopping experience for Shopify storefronts and an approval-based catalog assistant for merchants. This policy explains how information is processed when the app is installed or used.

Information processed

• Shop domain, installation credentials, granted permissions, and app configuration.
• Product titles, descriptions, tags, variants, prices, availability, and store policies needed to answer questions or prepare merchant proposals.
• Messages voluntarily entered into the storefront assistant and the recent conversation context sent with a request.
• Operational metadata such as request time, tool names used, success or failure status, and security events.

How information is used

Information is used only to provide product discovery, policy answers, Shopify cart actions, merchant-approved catalog improvements, security, debugging, and legal compliance. Echo-Mart does not sell personal information or use shopper messages for advertising profiles.

AI processing and service providers

Shopper messages and relevant commerce context are sent to OpenAI to generate responses and tool calls. Shopify processes store, catalog, cart, installation, and webhook data. Render hosts the production service and persistent database volume and processes encrypted application traffic and operational records.

Data minimization and retention

Echo-Mart does not persist storefront chat transcripts by default. It records only limited operational metadata for reliability and abuse prevention. Pending merchant proposals are retained until approved, rejected, or deleted. Store data is deleted after uninstall or a valid Shopify redaction request, subject to legal obligations and short-lived backups maintained by infrastructure providers.

Choices and rights

Depending on location, individuals may request access, correction, deletion, or restriction of personal information. Merchants can disable the theme app embed or uninstall Echo-Mart at any time. Shoppers should avoid entering payment card data, passwords, or other sensitive information in chat.

Security and international processing

Echo-Mart uses encrypted transport, signed Shopify requests, least-privilege access, rate limits, and approval gates. Information may be processed in the United States and other locations where service providers operate, subject to their contractual safeguards.

Contact

Privacy questions and rights requests: deydreamscontact@gmail.com.
Operator: Deylin Lucas
363 Blackburn Pl, Joppa, MD 21085, United States