Privacy Policy
1. Data Controller
Agentti Savanni Oy (Business ID: 3555811-9)
Leppävaarankatu 12 A, 02600 Espoo, Finland
privacy@agentsavanna.ai
2. What This Policy Covers
This policy explains how Agent Savanna collects, processes, and stores data when you install and use our Shopify app. It applies to the embedded Shopify application only.
3. Data We Collect
3.1 Shopify API Access Scopes
When you install Agent Savanna, the app requests the following Shopify API access scopes:
- read_orders, read_all_orders: access to your store's order data, including orders older than 60 days.
- read_products: access to your product catalogue.
- read_reports: access to Shopify's built-in analytics and reports.
3.2 Store Metadata
We collect basic store information provided by Shopify during installation: shop domain, store currency, and timezone.
3.3 Derived Data
We calculate and store aggregated metrics and AI-generated business insights based on the data accessible through the API access scopes listed in section 3.1.
3.4 Usage Analytics
We collect pseudonymised (not directly identifiable to a person) usage analytics server-side to understand how the app is used and to improve the service. No cookies or client-side tracking is used.
3.5 What We Do Not Collect
Agent Savanna does not store any end-customer personal data that can be identified with a customer from your store. This includes customer names, email addresses, shipping addresses, payment information, and browsing behaviour.
4. How We Use Your Data
We process data within the API access scopes listed in section 3.1 for the following purposes:
- Providing the service: extracting data, calculating revenue metrics, generating visualisations, and producing AI-powered insights.
- Improving the service: understanding usage patterns and fixing issues.
We do not sell, rent, or share your data with third parties for marketing purposes.
Our legal basis for this processing under the GDPR is contract performance (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
5. Third-Party Platform Connections
Agent Savanna may offer optional integrations with third-party platforms such as advertising services, search analytics, or social media tools. These connections are always initiated by you and require your explicit authorisation.
When you connect a third-party platform, we access data from that platform solely to provide services within Agent Savanna. We do not share your data from one connected platform with another. Each connection can be revoked by you at any time.
You will be asked to authorise any new data access before it is enabled.
6. Sub-Processors and Third Parties
We use third-party service providers to operate the service, including cloud infrastructure and AI model providers. Only aggregated metrics are sent to AI providers – never individual order or customer data.
Your data is accessed through the Shopify platform under your existing agreement with Shopify Inc.
7. Data Storage and Security
Your data is stored in the region you select during setup (EU or US). We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, and misuse. In the event of a data breach that may affect your data, we will notify you without delay.
8. Data Retention
- Active installations: data is retained for as long as the app is installed on your store.
- Uninstallation: store data is deleted upon uninstallation. Generated insights may be retained for up to 6 months after uninstallation to preserve your insights if you choose to return. You can request deletion at any time.
- Store identifier: a non-reversible store identifier may be retained for service administration purposes.
9. Your Rights
You can request access to your data at any time. Your store data is deleted upon uninstallation. To also delete retained insights, contact us at privacy@agentsavanna.ai. We will respond within 30 days.
10. Additional Information
International data transfers. Your data is stored in your selected region. When AI insights are generated, aggregated data may be processed by providers in other regions.
Changes to this policy. We may update this policy from time to time. If we make significant changes, we will notify you through the app or by email. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact
If you have any questions about this privacy policy or our data practices:
Agentti Savanni Oy
Leppävaarankatu 12 A, 02600 Espoo, Finland
privacy@agentsavanna.ai