Privacy Policy
1. Who We Are
Agent Savanna is a Shopify-embedded analytics app that generates AI-powered weekly insight reports for e-commerce merchants. The app is developed and operated by:
Agentti Savanni Oy
Business ID: 3555811-9
Espoo, Finland
privacy@agentsavanna.ai
When you install Agent Savanna, you (the merchant) act as the data controller for your store's data. We act as your data processor under GDPR Article 28. The terms of that relationship are set out in our Data Processing Agreement.
2. Scope
This policy covers data processing that occurs through the Agent Savanna Shopify app. It does not cover Shopify's own data practices.
3. What Data We Access
When you install Agent Savanna, the app requests the following Shopify API access scopes:
- read_orders, read_all_orders — Access to your store's order data, including orders older than 60 days. Used to calculate revenue metrics and trends.
- read_products — Access to your product catalogue. Used to identify top-performing products and product-level insights.
- read_reports — Access to Shopify's built-in analytics and reports. Used to supplement traffic and performance data.
- read_analytics — Access to Shopify's analytics data. Used for traffic analysis and conversion metrics.
- read_customers — Access to customer data. Used to identify new versus returning customer patterns. No individual customer data is stored.
We also receive basic store metadata from Shopify during installation, such as store currency and timezone.
4. What We Store — and What We Don't
Our core privacy principle: we never store individual orders or customer personal data.
All data accessed through the Shopify API is aggregated into weekly metrics before it is stored. Only these aggregated numbers — revenue totals, order counts, averages, traffic summaries, and similar statistical measures — are saved in our database. The same principle applies to data sent to AI model providers: they receive only aggregated metrics, never individual-level data.
We do not store:
- Customer names, email addresses, or contact details
- Shipping or billing addresses
- Payment information or credit card details
- Individual order contents or transaction records
- Customer browsing behaviour
We do store:
- Store metadata (currency, timezone)
- Aggregated weekly metrics (revenue, order counts, averages, traffic data)
- AI-generated insight reports produced for your store
5. How We Use Your Data
We process your data solely to provide the Agent Savanna service: extracting data from Shopify, calculating aggregated metrics, and generating AI-powered weekly insight reports displayed within your Shopify admin panel.
We do not sell, rent, or share your data with third parties for marketing or advertising purposes. We do not use your data for any purpose other than providing and improving the service.
Our legal basis for processing is that it is necessary to perform the service you have contracted for.
6. Sub-Processors
We use the following third-party service providers to operate the service:
- Google Cloud Platform — EU (Belgium) — Infrastructure and database
- Google AI — United States — AI-powered analysis
- OpenAI — United States — AI-powered analysis
- Anthropic — United States — AI-powered analysis
- Mistral AI — EU (France) — AI-powered analysis
AI providers receive only aggregated metrics — never individual order data or customer personal data.
If we add new sub-processors, we will notify you at least 14 days in advance.
7. International Data Transfers
All stored data is held on Google Cloud Platform in the EU (region europe-west1, Belgium). Sensitive credentials are encrypted at rest.
When AI-powered analysis is performed, aggregated metrics may be sent to AI providers located in the United States. The data sent is aggregated and contains no personal data.
8. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, and misuse. These include encryption of sensitive credentials, strict data isolation between stores, and confidentiality obligations for all personnel with access to store data.
9. Data Retention and Deletion
While installed: Your aggregated data and AI-generated reports are retained for as long as the app is installed on your store.
On uninstallation: All data associated with your store is deleted when you uninstall the app.
On request: You can request deletion of your data at any time by contacting us at privacy@agentsavanna.ai. Deletion will be carried out without undue delay.
10. Third-Party Data Connections
Agent Savanna may offer optional integrations with third-party platforms such as advertising or analytics services. These connections are always initiated by you and require your explicit authorisation. The same privacy principles described in this policy — particularly aggregation before storage — apply to any connected data source. You can revoke any connection at any time.
11. Data Breach Notification
In the event of a data breach that affects your data, we will notify you within 72 hours with a description of what happened, which data was affected, and what measures we have taken in response.
12. Your Rights Under GDPR
As a data controller, you have rights regarding the data we process on your behalf. You may request:
- Access — confirmation of what data we hold and a copy of it
- Rectification — correction of inaccurate data
- Erasure — deletion of your data
- Restriction — limitation of how we process your data
- Portability — a copy of your data in a structured, machine-readable format
- Objection — to object to specific processing activities
To exercise any of these rights, contact us at privacy@agentsavanna.ai. We will respond without undue delay.
13. Cookies and Tracking
Agent Savanna does not use cookies and does not perform any client-side tracking.
14. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you through the app. The "Last updated" date at the top indicates when the policy was last revised.
15. Contact
If you have questions about this privacy policy or our data practices:
Agentti Savanni Oy
Espoo, Finland
privacy@agentsavanna.ai