Orbit by Siddhivatech
01Overview
Orbit is a Shopify app, built and operated by Siddhivatech ("we", "us"), that adds an AI shopping assistant to a merchant's online store. Shoppers can chat with it, or optionally talk to it by voice, to find products, ask about store policies and check on their orders.
This policy explains what information Orbit handles, why, who it is shared with, how long it is kept and how to have it removed. It applies to the Orbit app and its storefront widget only, not to the merchant's own store or to Shopify.
02Who this policy covers
03Information we collect
From the merchant's Shopify store
Orbit asks Shopify for read-only access. It cannot change products, orders or the theme.
| Data | What and why |
|---|---|
Productsread_products | Product details, prices and availability, read live so the assistant can answer product questions. |
Ordersread_orders | A copy of the store's most recent orders (up to 50), including order number, status, items, total and customer email. Used for order-status answers and the merchant's analytics. |
Themeread_themes | Used to check that the chat widget is enabled in the store's theme. |
| Store profile | Store domain, store name and the access credentials Shopify issues to the app. |
From shoppers who use the assistant
| Data | What and why |
|---|---|
| Conversations | Messages sent to the assistant and its replies, with timestamps. Voice input is turned into text to produce a reply. |
| Visitor ID | A random ID kept in the shopper's browser so a conversation continues across pages. It does not contain the shopper's name or email. |
| Page context | The page the shopper is on (for example, the product they are viewing), so answers fit what they're looking at. |
| Customer account sign-inoptional | If a shopper chooses to sign in to look up their own orders, Shopify gives Orbit a temporary access token, which is stored with that conversation. |
Content the merchant provides
Knowledge-base entries (such as FAQs and policies), assistant instructions, chatbot settings and an optional uploaded chatbot icon.
04How we use information
- To answer shoppers' questions accurately, using the store's own catalog and content.
- To give merchants their conversation history, analytics and knowledge-base search.
- To run, secure, troubleshoot and improve Orbit.
We don't use shopper conversations for advertising, and we don't build profiles of shoppers across stores.
05AI processing
Orbit's answers are generated by a trusted AI service provider. To produce a reply, we send the provider the shopper's message, the recent conversation and only the store information needed to answer, such as matching products or knowledge-base entries.
The provider processes this information only to return a response on our behalf, under contractual terms that protect its confidentiality and security.
06Voice assistant
Voice is optional and only runs after the shopper starts it and allows microphone access. Audio streams from the shopper's browser to our AI service provider over an encrypted connection, using a short-lived, single-use token issued by our server.
We don't receive or store voice recordings.
07How long we keep information
- While Orbit is installed: conversations, analytics and stored orders are kept so the merchant can review them.
- When a merchant uninstalls: we immediately revoke and delete the store's access token, so Orbit can no longer read the store.
- About 48 hours after uninstall: Shopify sends us a deletion request, and we permanently delete all of that store's data, including conversations, orders, the knowledge base and settings.
09Your privacy rights (GDPR / CCPA)
Shoppers can ask to see or delete their data. Because the merchant controls their store's data, requests are usually made through the merchant, and Shopify forwards them to us automatically:
| Request | What we do |
|---|---|
Accesscustomers/data_request | We review the request and provide the merchant with the data we hold about that customer. |
Deletioncustomers/redact | We remove the customer's personal details from the store's stored orders. |
Store deletionshop/redact | We permanently delete all of the store's data. |
Merchants, or shoppers who can't reach the merchant, can also contact us directly at sales@siddhivatech.com.
10Security
- All data is sent over encrypted HTTPS/TLS connections.
- Requests from Shopify are verified with Shopify's signature before we act on them.
- Our AI API key stays on our server and is never sent to shoppers' browsers.
- Access to production systems is restricted to authorised staff.
No system is perfectly secure. If a breach affects your data, we will notify affected merchants without undue delay.
11Children
Orbit is not directed at children under 16, and we don't knowingly collect their personal information.
12Changes to this policy
If we update this policy, we'll change the "Last updated" date at the top. If a change is significant, we'll tell merchants in the app or by email before it takes effect.
13Contact us
Questions or privacy requests?Siddhivatech · sales@siddhivatech.com
Email us