Privacy Policy
Last updated: August 10, 2026
1. Introduction
Magebytes Technologies ("we", "us", or "our") operates the Relay AI Shopping Assistant platform ("Relay", "Service"). This Privacy Policy describes how we collect, use, and share information when you use our Service as a merchant or when your store visitors interact with the Relay widget.
2. Information We Collect
2.1 Merchant Account Data
- Name, email address, and password (hashed)
- Store domain and platform credentials (encrypted at rest)
- Billing information (processed by Stripe/Shopify — we do not store card numbers)
- Agent configuration settings
2.2 Shopper Session Data
- Chat messages exchanged with the Relay widget
- Session identifiers (anonymous UUID, stored in browser cookies)
- Email address and name, if voluntarily provided by the shopper
- Products viewed and added to cart through the widget
2.3 Usage & Technical Data
- API request logs (IP address, timestamps, response times)
- Error and performance traces via Sentry
- Widget impression and engagement counts
3. How We Use Information
- To operate and improve the Relay platform and widget
- To generate AI responses using OpenAI (see Section 5)
- To send transactional emails (escalation alerts, password reset, account updates)
- To enforce usage quotas and billing plans
- To detect abuse and maintain platform security
- To produce anonymised, aggregated analytics for product improvements
4. Data Retention
Chat sessions are retained for 90 days by default and then automatically deleted. Merchant account data is retained for the lifetime of the account and for 30 days after account closure. You may request earlier deletion by contacting privacy@magebytes.com.
5. Third-Party Services
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI response generation | Chat messages, product context |
| Sentry | Error monitoring | Stack traces, request metadata |
| Stripe | Payment processing (non-Shopify) | Billing details |
| Shopify | App billing & OAuth | Shop domain, access token |
| Amazon SES / SMTP | Transactional email | Merchant email address |
6. Shopify App — Data Handling
Relay is available as a Shopify app. We comply with Shopify's Partner Program Agreement and GDPR requirements. We respond to the following mandatory Shopify webhooks:
- customers/data_request — we return all chat sessions linked to the customer's email
- customers/redact — we delete all chat data for the customer within 30 days
- shop/redact — we delete all merchant and shopper data within 30 days of app uninstall
7. Cookies
The Relay widget sets a first-party session cookie (relay_session) scoped to the merchant's store domain to maintain conversation continuity across page loads. No cross-site tracking cookies are used.
8. Your Rights
Depending on your jurisdiction you may have the right to access, correct, delete, or port your data, and to object to or restrict processing. To exercise any of these rights, contact privacy@magebytes.com.
For shoppers whose data is processed on behalf of a merchant, please contact the merchant directly. We will assist merchants in responding to such requests.
9. Security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Platform credentials (API keys, access tokens) are encrypted at the field level before storage. Access to production systems is restricted to authorised personnel with MFA.
10. Changes to This Policy
We may update this policy from time to time. We will notify active merchants by email at least 14 days before material changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
11. Contact
Magebytes Technologies
Privacy Officer: privacy@magebytes.com
Support: support@magebytes.com