Privacy Policy

Overview

Kebzy ("we", "us") provides a chat-first AI assistant that connects to Shopify stores so merchants can manage their store through natural-language conversations. This Privacy Policy explains what information we collect when you use Kebzy, how we use it, who we share it with, and the rights you have over it.

Kebzy is operated by Tollemache Group Pty Ltd, registered at 59 Nashos Pl, Wacol QLD 4076, Australia. For privacy questions, write to support@kebzy.com.

What we collect

When you create a Kebzy account and connect a Shopify store, we collect and process:

• Account information — the email address and password you register with, and any profile details you add later.
• Shopify connection data — your store's myshopify.com domain and an offline access token issued by Shopify during OAuth. The access token is encrypted at rest (see "Security" below).
• Store data accessed via the Shopify Admin API — products, variants, images, collections, pages, orders, inventory levels, themes, and other resources you ask Kebzy to read or modify. We only access data inside the scopes you approved at install time.
• Chat messages and agent traces — the prompts you send, the assistant's responses, the tool calls Kebzy makes on your behalf, and the commit metadata written to your per-store version-control repository.
• Billing data — handled entirely by Shopify through their Billing API. We store the Shopify AppSubscription GID and your current plan; we never receive, see, or store card numbers, expiry dates, or any other payment details. Charges appear on your regular Shopify bill.
• Operational logs — request ids, timing, coarse-grained event metadata, and error traces. Used for debugging and abuse prevention. Secrets, tokens, and Shopify access tokens are redacted from these logs before they are written.

Customer data in orders. When you ask Kebzy about an order, its order-search tool reads that order's linked customer name, email, and shipping address from the Shopify Admin API so it can answer you. Kebzy never bulk-exports your customer list and reads no customer data beyond the specific order you asked about. These values may appear in your chat history; they are removed when you delete the chat, by our automatic retention sweep, and (on a best-effort basis) when Shopify sends us a customers/redact or shop/redact request. We process this data solely to answer your request, and we never sell personal data.

How we use it

• To provide the service — executing the Shopify actions you ask for, surfacing them in your History, and supporting rollback.
• To bill your subscription and track trial eligibility via Shopify's Billing API.
• To detect abuse (rate limiting, fraud signals) and to keep the service reliable.
• To improve Kebzy. We may analyse aggregated, de-identified usage patterns. We do not use your chat content or store data to train third-party AI models.
• To send essential service emails (password reset, billing receipts, security notices). Marketing emails are opt-in only.

Who we share it with

We only share what is necessary to operate Kebzy, under written data-protection terms with each provider:

• Shopify — all store actions are executed via Shopify's official Admin GraphQL API using your OAuth token.
• Anthropic — chat content and tool results are sent to Anthropic's Claude API to generate assistant responses. Anthropic contractually agrees not to train models on API inputs. See Anthropic's terms .
• Shopify Billing — subscription management and payment collection happen inside Shopify via their Billing API. We never receive card data; see Shopify's Privacy Policy for how they handle it.
• Infrastructure providers — hosting, databases, and error monitoring run on Railway (web hosting and managed PostgreSQL), Resend (transactional email), and Sentry (error monitoring) , under their data-processing terms.
• Law enforcement — only when compelled by a valid legal request and subject to the minimum disclosure necessary.

We do not sell, rent, or trade your personal data.

Where the data lives

Kebzy's production infrastructure is hosted in the United States (Railway's primary region). If you use Kebzy from another region, your data will be transferred to and processed in that region under appropriate safeguards (Standard Contractual Clauses where required).

How long we keep it

• Active accounts — we retain your data while your account is active and for as long as needed to provide the service.
• Disconnect — when you disconnect a Shopify store or delete your account, we immediately destroy the encryption key material bound to that merchant, which cryptographically erases the stored access tokens.
• GDPR / Shopify webhooks — in line with Shopify's requirements, we hard-delete your merchant row and per-store data no later than 48 hours after disconnection. We honour the four mandatory Shopify webhooks (shop/redact, customers/redact, customers/data_request, app/uninstalled) and respond to them on that schedule.
• Operational logs — retained for up to 30 days then purged.
• Billing records — retained for as long as required by tax law, typically 7 years.

Security

We follow practices appropriate to the sensitivity of the data we handle, including:

• Envelope encryption for access tokens. Shopify access tokens are encrypted with a per-merchant data encryption key, which is itself wrapped under a master key held in our key management system. The encryption context binds every decryption attempt to the owning merchant, so a leaked database row cannot be decrypted under another merchant's identity.
• Tenant isolation. All store data is scoped to its merchant id in the database and on disk. Cross-tenant access paths are rejected at the query and filesystem layers.
• Prompt-injection hardening. Results returned from third-party systems (Shopify payloads, web pages) are sanitised before they re-enter the AI loop, reducing the risk that a malicious listing can coerce the assistant.
• Transport security. All traffic to and from Kebzy is TLS-encrypted; HSTS is enforced in production.
• Audit trail. Every change the assistant makes to your store is recorded in a per-store git-backed audit log, which you can review and roll back.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you without undue delay and in line with applicable law.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Export a copy of your data.
• Restrict or object to certain processing (including a right to opt out of marketing emails at any time).
• Withdraw consent you previously gave.
• Lodge a complaint with your data-protection authority.

To exercise any of these, email support@kebzy.com from the address on your account. We aim to respond within 30 days.

Cookies

Kebzy uses a small number of strictly-necessary cookies — a signed session cookie and a CSRF state nonce during the Shopify install flow. We do not use advertising or third-party tracking cookies, and we do not run any third-party analytics on either the signed-in app or the marketing site.

Children

Kebzy is not directed at children under 16 and we do not knowingly collect data from them.

Changes to this policy

We may update this policy to reflect changes to the service or to applicable law. Material changes will be announced by email and by updating the "Last updated" date above. Continued use of Kebzy after the effective date constitutes acceptance of the updated policy.

Contact us

Questions or requests? Email support@kebzy.com