Privacy Policy — Rozmova

Last updated: August 6, 2026

This Privacy Policy explains how FOP Yushkov Oleh Yaroslavovich ("Rozmova," "we," "us") collects, uses, and protects information in connection with the Rozmova application (the "App") for Shopify stores.

Rozmova is an AI sales assistant that merchants install on their Shopify store. This policy covers two groups:

• Merchants — the store owners and staff who install and configure the App.
• Shoppers — the visitors and customers of a merchant's store who interact with the chat widget.

If you are a shopper, the merchant whose store you are using is the controller of your personal data; Rozmova processes that data on the merchant's behalf.

1. Information we collect

From merchants

• Store information: your myshopify.com domain, store name, and access granted through Shopify's permission scopes (Rozmova requests read access to products only).
• App configuration: settings you enter in the App, such as assistant name, greeting, tone, language, brand color, and business information.
• Billing status: your selected plan and subscription status (billing itself is handled by Shopify).
• Usage data: counts of AI replies used, for plan limits and analytics.

From shoppers (via the storefront widget)

• Chat content: the messages a shopper types and the assistant's replies, stored as chat logs.
• Session identifier: a randomly generated ID used to group messages within a browsing session. This ID is not linked to a shopper's real-world identity.
• Lead information: an email address, and only if a shopper voluntarily submits it through the contact form in the widget.
• Cart interaction events: anonymous events when the assistant recommends a product or a product is added to cart, used for merchant analytics.

We do not intentionally collect payment card details, passwords, or special categories of personal data through the App.

2. How we use information

We use the information above to:

• Provide the App's core function — understanding shopper questions and recommending products from the merchant's catalog.
• Generate the assistant's responses (see Section 3 on AI processing).
• Enforce plan limits and provide usage and shopper-question analytics to the merchant.
• Store leads voluntarily submitted by shoppers so the merchant can follow up.
• Maintain, secure, debug, and improve the App.
• Comply with legal obligations and Shopify's platform requirements.

3. AI processing (important)

To generate replies, the content of a shopper's chat messages and the merchant's product catalog are sent to our AI provider, Anthropic, via the Anthropic API. Anthropic processes this data solely to generate a response and in accordance with its own terms. We send only what is needed to answer the shopper's question. We do not use chat content to train our own models.

4. How we share information

We do not sell personal data. We share information only with:

• Anthropic — our AI processing provider (see Section 3).
• Railway — our hosting and database infrastructure provider, where App data is stored.
• Shopify — the platform the App runs on, including for billing and for delivering the widget through Shopify's App Proxy.
• Legal / safety — if required by law, or to protect the rights, property, or safety of Rozmova, merchants, or others.

Each provider processes data on our behalf under its own security and privacy commitments.

5. Data retention

• Chat logs and analytics events are retained to provide merchant analytics and are deleted when a merchant uninstalls the App or upon a valid deletion request (see Section 7).
• Lead emails are retained until deleted by the merchant or upon a valid deletion request.
• Merchant configuration is retained while the App is installed.
• When a merchant uninstalls the App, Shopify sends a shop/redact request (typically 48 hours after uninstall). On receipt, we delete the store's data — including settings, chat logs, and leads — associated with that store.

6. Security

App data is stored on managed infrastructure (Railway / PostgreSQL) accessed over encrypted connections. Requests from the storefront widget are verified using Shopify's App Proxy signature, and administrative webhooks are verified using HMAC signatures. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information we hold.

7. Your rights and choices

Depending on your location (including under the EU/UK GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing.

Shoppers: because the merchant is the controller of your data, please direct requests to the merchant whose store you used. Rozmova supports the following Shopify compliance flows on the merchant's behalf:

• customers/data_request — we compile the personal data we hold that can be associated with the request and make it available to the merchant.
• customers/redact — we delete personal data associated with the shopper.
• shop/redact — we delete all data for a store after the App is uninstalled.

Merchants: you can request access to or deletion of your data by contacting us (Section 10), or by uninstalling the App, which triggers deletion as described in Section 5.

8. International data transfers

Your information may be processed in countries other than your own, including the United States, where our providers operate. Where required, we rely on appropriate safeguards for such transfers.

9. Children

The App is not directed to children, and we do not knowingly collect personal data from children under the age of 16 (or the applicable age in your jurisdiction).

10. Contact

For any questions or requests regarding this policy or your data, contact:

FOP Yushkov Oleh Yaroslavovich
Email: info@becleancare.com

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, notifying merchants through the App.