What data does the AI Shopping Assistant collect, and how is it kept private?

The AI Shopping Assistant only collects what it needs to chat with your shoppers and help them find the right products — and we take care to keep that data private, secure, and out of advertising.

What it collects

• Chat messages — the text a shopper types and the assistant's replies.
• Conversation metadata — a conversation identifier and timestamps used to keep context within a single session.
• Shopify checkout handling (only if a shopper initiates it) — if a shopper chooses to start checkout through the assistant, shipping details such as address or zip may be processed to complete the checkout. Anything a shopper voluntarily types into the chat is treated as chat content.

We use this data to:

• Generate replies and provide shopping help in real time.
• Keep conversation context within a session.
• Monitor product quality and performance through aggregated analytics.

Who we share it with

To run the assistant, we share data with a small set of trusted service providers (subprocessors):

• DeepSeek — our AI model provider. To produce a reply, conversation content is sent to DeepSeek's API.
• PostHog — our product-analytics provider. Data sent to PostHog is first passed through automated personal-information redaction — emails, phone numbers, long digit sequences, and street addresses are masked.
• Shopify — the platform the assistant runs on, used to retrieve product and store information.

What we don't do

• POWR does not sell shopper data.
• POWR does not use it for advertising.

Storage & deletion

• Conversation data is stored in POWR's databases.
• It's deleted when you uninstall the assistant, and in response to verified deletion requests.

For a fuller walkthrough, see How long is shopper data kept, and how is it deleted?.

Your shoppers' rights

• Shoppers may request access to or deletion of their conversation data by contacting you (the merchant) or POWR at privacy@powr.io.
• POWR also honors Shopify's mandatory data-request and data-erasure (redaction) requests submitted through your Shopify admin.
• Please note: anonymous conversations (where the shopper did not sign in) are not linked to any identity, so they cannot be matched to an individual deletion request.

For more on how this maps to data-protection law, see Is the AI Shopping Assistant GDPR compliant?.

Related articles

• How long is shopper data kept, and how is it deleted?
• Is the AI Shopping Assistant GDPR compliant?

Still need help? Reach our team at support@powr.io. For privacy-specific questions, please contact privacy@powr.io.