Privacy and GDPR
Bountful handles shopper data for your store, and you stay in charge of it. In data protection terms, your store is the “controller” and Bountful is your “processor”.
What Bountful keeps
- What a shopper shares in the chat, such as their messages, name and email.
- What they do on your store, such as the products they view and their cart.
- Their orders, such as one they ask about, or one placed after a chat.
Bountful uses this to help your shoppers, and to show you how it’s working for your store. We don’t sell it. The AI services we use don’t train on it.
We may also use totals that don’t point to a person, such as counts across stores, to understand and improve Bountful.
Shoppers’ cookie choices
Bountful follows the choice a shopper makes in your store’s cookie banner. If they say no to tracking, the chat still works. Bountful just remembers less about them.
How long it’s kept
Shopper data is deleted once it’s 12 months old. You can pick 6 or 3 months instead, in Settings → Privacy & data.
If you uninstall Bountful, your store’s data is deleted 48 hours later.
Where it’s stored, and how it’s protected
Data is stored mainly in the United States. When it leaves the UK or Europe, we use the safeguards the law asks for.
We protect it with encryption, access limits and strong sign-in.
When a shopper asks for their data
A shopper can ask you for a copy of their data, or ask you to delete it. You send both requests from Customers in your Shopify admin, and Shopify passes them to Bountful.
Bountful then deletes what it holds on that shopper, or emails you a link to a file of it.
Is Bountful GDPR compliant?
Whether your store meets GDPR depends on how your whole store handles data, not on one app. It’s a legal question, so it isn’t one we can answer for you.
Here is what Bountful does:
- You stay in charge of your shoppers’ data.
- Shopper data is deleted after 12 months, or sooner if you choose.
- A shopper can get a copy of their data, or have it deleted.
- We don’t sell shopper data.
Our privacy policy has the full details.
For a data processing agreement, or a legal question, ask a person. Use the Human support tab in the app, or write to support@bountful.com.