Privacy Policy

Provider: Siddhivatech · Contact: sales@siddhivatech.com

1. Overview

Orbit ("the App", "we") is a Shopify app that adds an AI chat and optional voice assistant to a merchant's storefront. This policy explains what data the App collects, how it is used, who it is shared with, and the choices available to merchants and their customers.

2. Who the data is about

• Merchants — Shopify store owners who install the App.
• Shoppers — visitors to a merchant's storefront who interact with the assistant.

3. What we collect and process

From the merchant's Shopify store (via granted scopes):

• Products (read_products) — catalog data used to answer product questions.
• Orders (read_orders) — recent orders, used to answer order-status questions and for in-app analytics.
• Theme/content (read_themes) — to detect and render the storefront widget.
• Shop profile — store domain and name.

From shoppers interacting with the assistant:

• Chat and voice messages — the text of questions asked (voice is transcribed to text to generate a reply); conversation transcripts and timestamps.
• Technical data — basic request metadata needed to operate the service.

Merchant-provided content: knowledge base entries and assistant prompts the merchant configures.

4. How we use the data

• To generate relevant, grounded answers to shopper questions.
• To provide merchant features: conversation logs, analytics, knowledge-base search.
• To operate, secure, and improve the App.

We do not sell personal data.

5. Third-party processing

To produce answers, the App sends shopper message text and relevant store context (e.g. catalog snippets and the merchant's knowledge-base entries) to Google Gemini (Google LLC) for AI processing. Google processes this data as our service provider to return a response. See Google's privacy terms and the Gemini API terms. We do not send AI providers more than is needed to answer the question.

6. Voice

The optional voice assistant streams microphone audio from the shopper's browser directly to Google's Gemini Live service over a secure connection using a short-lived, single-use token minted by our server. Audio is not stored on our servers.

7. Data retention

• Conversation transcripts and analytics are retained while the App is installed, so the merchant can review them.
• On uninstall, and on Shopify's mandatory data-erasure requests, we delete or anonymize the associated store and shopper data (see Section 9).

8. Data sharing

We share data only with: (a) Google (AI processing, as above), and (b) Shopify (the platform the App runs on). We do not share personal data with advertisers or data brokers. We may disclose data if required by law.

9. Shopify mandatory data requests (GDPR/CCPA)

The App implements Shopify's required privacy webhooks:

• customers/data_request — we provide the stored data for the identified customer.
• customers/redact — we delete the identified customer's data.
• shop/redact — we delete the shop's data after uninstall.

Merchants and their customers may exercise data-subject rights via the merchant, who can contact us at sales@siddhivatech.com.

10. Security

Data is transmitted over HTTPS/TLS. The AI provider is authenticated server-side; the long-lived API key is never exposed to shopper browsers. Access tokens and credentials are stored securely.

11. Children

The App is not directed to children and does not knowingly collect data from them.

12. Changes to this policy

We may update this policy; the "Last updated" date will change. Material changes will be communicated to merchants.

13. Contact

Questions or requests: sales@siddhivatech.com.