SayMaya Privacy Policy

SayMaya is a Shopify app operated by Cuanto Labs LLC, a Florida limited liability company ("SayMaya," "we," "us"). It adds an AI chat assistant to a merchant's storefront and gives the merchant's team an inbox to answer chats. This policy explains what the app collects, why, and what we do with it.

This policy also covers saymaya.com. The website uses only first-party, cookieless analytics and sets no tracking cookies.

When a merchant installs SayMaya, the merchant decides to offer chat to their shoppers. For shopper information, the merchant is the controller and we process it on the merchant's behalf, only to run the app. Shoppers with questions about their data can contact the store, or us at hello@saymaya.com.

• Store information from Shopify: store name, myshopify domain, the store owner's name and email, contact email, and storefront branding (logo, colors) to set up the inbox and send account emails.
• Store data the AI reads to answer: products, prices and inventory, store policies, and active discounts, read live from the Shopify Admin API. The merchant chooses which of these the AI may use in the app's Settings page.
• Orders: only when a shopper asks about an order and gives the order number together with the email or phone on that order. We read that one order's status and shipping details to answer, and we do not copy orders into our own systems.
• Chat content: the messages a shopper sends and the replies, plus a name or email if the shopper chooses to give one, and basic technical details (browser, approximate location from IP) the chat widget needs to work.
• Usage and billing: how many AI conversations a store uses each month and the store's plan. Payments go through Shopify Billing; we never see card details.
• App analytics: a few events about how merchants use the app (install, opening the inbox, saving settings, plan changes), recorded with our own cookieless analytics tool. These events carry the store domain, never shopper data.

• To answer shoppers' questions with accurate, current store information.
• To hand a conversation to the merchant's team when a shopper asks for a person or the AI is unsure.
• To send the merchant account emails: sign-in details, hand-off notices, and plan limit notices.
• To enforce plan limits, keep the service secure, and fix problems.

We do not sell personal information, use it for advertising, or use merchant or shopper data to train AI models.

We share data only with service providers that help run the app, under contracts that limit their use of it to providing their service to us:

• A cloud hosting provider (servers in the United States), where the app, inbox and databases run.
• AI model providers, which process chat messages and the store data needed to write a reply. We use only providers that do not train on API data.
• An email delivery provider, for account and notice emails to merchants.
• Shopify, as the platform the app runs on and the billing provider.

We may also disclose information if the law requires it.

Chat conversations are kept while the store uses the app, so the merchant's team can see past conversations. When a merchant uninstalls the app, Shopify sends us a deletion request 48 hours later and we delete the store's data, including its conversations and inbox account. When a shopper's data is deleted through Shopify (a customer redaction request), we delete that shopper's conversations. We answer Shopify customer data requests by sending the store owner an export of that shopper's data.

Data is encrypted in transit. Shopify access tokens are stored encrypted. Access to production systems is limited to staff who need it. Every read of customer and order data is recorded in an append-only access log kept for one year. We follow a written security incident response plan and will notify affected merchants without undue delay.

Depending on where you live (for example under the GDPR or the CCPA), you can ask to access, correct, delete or export your personal information. Shoppers should contact the store first; merchants and shoppers can also email us at hello@saymaya.com and we will respond within 30 days.

We may update this policy as the app changes. The date at the top shows the latest version.