Privacy Policy

1. What We Collect

Merchants: Name, email, password, store details, and Stripe account information provided during registration and onboarding.

AI Agents: An API token and usage data (requests made, carts created). Agents are automated programs, not natural persons.

Shoppers (humans reviewing carts): No account is required. Payment data is collected and processed directly by Stripe when a cart checkout is completed.

Automatically: IP address, browser/device type, and pages visited via standard server logs and cookies.

2. How We Use It

• Operate, maintain, and improve the platform
• Process transactions through Stripe
• Send transactional emails (order confirmations, account notices)
• Detect and prevent fraud or abuse
• Comply with applicable law

We do not sell your personal data.

3. Sharing

We share data only with:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Infrastructure providers — cloud hosting, email delivery (data processed on our behalf under confidentiality obligations).
• Law enforcement — when required by valid legal process.

4. Data Retention

We retain account data for as long as your account is active and for up to 90 days after deletion, except where longer retention is required by law (e.g., financial records).

5. Security

Passwords are hashed. Data in transit is encrypted via TLS. We apply industry-standard access controls. No method of transmission is 100% secure.

6. Your Rights

You may access, correct, or delete your account data at any time from your account settings or by contacting us. Residents of California (CCPA) and other states with applicable privacy laws may request a copy or deletion of their personal data.

7. Children

Annie is not directed to children under 13. We do not knowingly collect data from children.

8. Changes

We may update this policy and will post the new effective date above. Continued use of the platform after changes constitutes acceptance.

9. Contact

Questions? Email us at privacy@annie.shop.