Privacy Policy

Effective Date: July 2025

App Name: Tentacle AI (by Ubiton AI Kft.)
Website: https://tentacle.ubiton.ai
Contact: sandor@ubiton.ai

1. Introduction

Tentacle AI is a WhatsApp-based assistant for Shopify merchants. It helps merchants automatically recover abandoned checkouts and provide customer support through AI-powered WhatsApp conversations.

We value your privacy and are committed to protecting your data in accordance with the General Data Protection Regulation (GDPR), Meta's Platform Terms, and Shopify App Store Requirements.

2. What Information We Collect

From Shopify Merchants:

  • Store information (store domain, name, email)
  • Access tokens (to interact with the store via Shopify API)
  • Abandoned checkout data (non-sensitive cart contents, time, checkout ID)
  • Customer metadata (first name, last name, phone number, email, if available)

From WhatsApp Users (End-Customers):

  • Phone number (required for message delivery)
  • Chat content (processed to generate AI replies)

From Meta:

  • WhatsApp Business Account ID
  • WhatsApp phone number ID
  • Approved message templates
  • Message delivery metadata (timestamps, status)

3. How We Use This Information

  • To send abandoned cart recovery messages via WhatsApp
  • To provide automated customer support responses
  • To personalize conversations using AI based on Shopify data
  • To allow merchants to manage and customize their WhatsApp AI assistant
  • For diagnostics, analytics, and usage improvements

4. Data Sharing & Third Parties

We do not sell or share data with third-party advertisers.

However, we do share data with:

  • Shopify Inc. – to access store information and customer data via their API
  • Meta Platforms Inc. – to send and receive WhatsApp messages via the WhatsApp Business Platform
  • OpenAI, L.L.C. – to generate AI replies to customer messages (chat content only)

All data sharing is subject to strict data processing agreements and privacy safeguards.

5. Data Retention

  • Shopify store metadata is stored as long as the merchant uses the app.
  • Customer chat logs and message metadata are stored for 30 days unless configured otherwise by the merchant.
  • Merchants can request deletion at any time by contacting us or uninstalling the app.

6. User Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data ("Right to be forgotten")
  • Object to processing
  • Lodge a complaint with a supervisory authority

To exercise these rights, email: sandor@ubiton.ai

7. Shopify & Meta Compliance

  • We implement all required Shopify customer data redaction endpoints, including:
    • /customers/redact
    • /shop/redact
    • /customers/data_request
  • We follow Meta's WhatsApp Business Policy and only use customer phone numbers for service-related messages.
  • End-users must opt in to receive WhatsApp messages from the merchant (via store checkbox or similar).

8. Security

We apply industry-standard security practices, including:

  • End-to-end encryption via HTTPS
  • Role-based access control
  • Secure token management (tokens are encrypted at rest)

9. Contact

For privacy-related inquiries, contact us at: