Privacy Policy

AgentCommerce privacy notice

Last updated: 2026-10-07

Who we are

AgentCommerce is a Shopify app operated by LAN Holdings LLC ("we"). It provides a shopping assistant and merchant tools for a Shopify store. Our domain is agentchannel.app. For privacy questions, email privacy@agentchannel.app. For support, email support@agentchannel.app.

We process store and shopper information to provide the service to the merchant. Shoppers should contact the store first about its orders and privacy practices. They can also contact us about information processed by AgentCommerce.

Information about the merchant and the store

• The store's Shopify address and id, granted permissions and installation records.
• Shopify sign-in records for staff using the app, which may include names and email addresses. These records are stored encrypted. Sign-in expiry limits access; uninstall processing deletes stored sign-in records.
• Plan, subscription, trial dates, conversation counts, model usage and spend records used to enforce allowances. The public plans are Launch, Growth and Scale. Growth has a 10-day trial with a $10 provider-funded model-spend cap per store. A merchant's own AI provider key removes that subsidy cap while other limits and provider charges still apply. Shopify handles subscription payment; the app does not receive payment card details.
• App settings and optional AI provider or helpdesk credentials, stored encrypted.

Information from the store's orders

The app processes orders and refunds for store reporting and assistant sales attribution. Incoming Shopify order data can include a customer's name, email and addresses. The retained analytics contain order ids, value and currency, payment and cancellation status, sales channel, referral or campaign information and product lines. These analytics do not keep the customer's name, email or address. The configured analytics window is at most 30 days. Cleanup removes older analytics in batches when the retention job runs.

Information about shoppers

These features depend on the store's setup. Optional features are off by default.

Shopper chat

The app holds shopper messages, assistant replies and cart state so the conversation can continue. Messages and relevant store context are sent to an AI model provider to generate replies. The private server session starts with a 35-minute expiry; admitted activity extends it to at least 35 minutes from that activity. Expired sessions cannot be loaded. Creating another session can remove expired sessions in batches; expiry does not itself prove physical deletion. The browser also keeps the current conversation for the tab session. Conversation metering uses a random conversation id and start time.

Scrubbed chat visible to the store

When enabled, the app keeps scrubbed shopper and assistant text for the store owner and same-store staff explicitly authorized by the owner to inspect answer quality. The 30-day clock starts when a new private server session is created. Writing or viewing evidence does not restart it, and existing sessions are not backfilled.

Before evidence is stored, recognized personal details are replaced with an omission marker and the rest of the message is kept. This covers email addresses, phone numbers, payment card and social security numbers, and values that follow contact, address, name, password or other credential, date-of-birth, health, passport or card cues. Tool results, thinking and raw cart or order records are not copied. Automated scrubbing can miss details, for example an unlabelled number or address, or a name written in lowercase, so this text should not be treated as anonymous.

Access is tied to the store and its current app installation. The owner can revoke staff access. Authorization checks are logged without chat text, with a separate 90-day retention period for investigating unauthorized access.

Evidence is unavailable at 30 days. The app includes an optional job scheduled every 12 hours that deletes expired evidence and access logs in batches of up to 500 of each per store and app. Physical deletion depends on that job running successfully; backlog or failures can delay it. These clocks apply to app records, not backup copies or records held by other providers.

Answer signals

The app records the store, time, answer category, a topic from a fixed list and ids of sold-out products so the merchant can see unanswered questions. It does not keep the shopper's wording in these signals unless the store turns on question capture. That option keeps up to three search words after filtering identifying details. This filtering is automated and can miss identifying context. Signals have a 35-day retention period, with batch cleanup on recording and through the optional daily job.

Shopper memory (on by default for new stores)

Memory is on by default for new stores, and merchants can turn it off in Settings. Signed-out shoppers are never remembered. With memory enabled, the assistant can keep short preferences a signed-in shopper tells it, such as size, budget, style or delivery preference. They are stored under a keyed code of the shopper's account, without raw messages or a plain customer id. Preferences expire at most 180 days after their last update, within the period the merchant chooses. The shopper can ask what is remembered and ask to forget. The merchant can view and download preferences in Settings. Turning memory off erases the store's saved preferences. Expired records are cleaned up in batches.

Order status lookups (off by default)

A shopper can provide an order number and email address to find an order in Shopify. The lookup does not store them. To limit repeated attempts, the app keeps keyed codes of the session and internet address in daily rate-limit records and short-lived request markers.

Helpdesk handoff (off by default)

If the merchant connects Gorgias or Zendesk, the shopper must confirm before the app sends their email, name if given, a summary and up to 40 conversation messages to that helpdesk. The app's handoff records keep fingerprints and a keyed email code, rather than that email, summary or conversation. Records older than 35 days are removed in batches when another handoff begins. The helpdesk has its own retention practices.

In the shopper's browser

The assistant stores the current conversation for the tab session, a random visitor id for a store's traffic test, the date a welcome prompt was shown and short-lived markers to prevent repeated cart changes. During a traffic test it can add a cart note showing whether the shopper saw the assistant, so the store can compare orders.

Merchant assistant and content drafts (off by default)

The merchant assistant processes store information and merchant messages through an AI model provider. Chat history holds at most 40 messages and expires after 12 idle hours. Morning summaries have a 35-day retention period. Drafts can use unanswered-question topics, counts, captured search words and the store's listings, pages and policies. Drafted changes and operation records are stored for review, approval and follow-up; a draft cannot change the store without merchant approval and the save controls.

Merchant run records contain answer fingerprints, cost and outcome, with a 62-day cleanup threshold. New merchant runs remove older run records, expired chats and old summaries. Shopper billing answers are fingerprint-only. Separate admission and financial records are not all deleted with chat evidence or answer fingerprints.

Analytics on the app's own pages

The app's merchant pages do not mount Google Tag Manager or Vercel Web Analytics. Store reporting described above is separate from page tracking.

AI improvement consent

We do not use your store's data or your shoppers' messages to train or improve AI models unless you agree in writing. Improvement exports check current consent for the store and app installation, including for derived and aggregate data. Consent records contain the written-record reference and a fingerprint of the consent text. Missing or revoked consent excludes the store's data. Fixed fictional test datasets do not require merchant consent. This describes our use of data; AI providers' handling is governed by their terms.

Service providers

We use Shopify for the platform and subscription payment, Vercel for hosting and the AI gateway, Supabase for the database, Inngest for background jobs and Anthropic for AI replies. Depending on funding, AI requests go through the Vercel gateway or directly to Anthropic using the merchant's key. Gorgias or Zendesk receives handoff information only when the store connects that helpdesk and the shopper confirms the handoff.

Provider processing locations, backup retention and provider-held copies depend on the service and account terms. The app's retention periods do not set those providers' deletion schedules.

Purpose, privacy requests and erasure

Records serve conversation continuity, answer quality, store reporting, authorized access investigation and financial reconciliation. Chat evidence does not extend the retention clock for sessions or billing records.

The app accepts Shopify customer data requests, customer erasure requests and shop erasure requests. It records a 30-day due date for customer data requests and provides an export workflow for delivery to the merchant. Delivery requires a separate recorded confirmation; receiving a webhook is not proof that delivery has happened.

Customer erasure processing removes matched order analytics, remembered preferences and helpdesk fingerprints. Scrubbed evidence has no retained customer id for automatic customer matching. Contact the store or our privacy address to request help locating information in chat evidence.

Uninstall processing retires the installation and removes its stored Shopify sign-in records, private shopper sessions, scrubbed evidence, staff grants and improvement consent. Shop erasure removes store records linked for deletion, while limited redaction and recovery receipts can remain. These actions do not establish erasure of every backup or provider copy.

Changes

We will update this notice when our information practices change. The date of the latest update appears at the start of this notice.

AgentChannel privacy policy

Last updated: 2026-11-08

AgentChannel (“we,” “us,” “our”), operated by LAN Holdings LLC, is a Shopify app that audits how your store appears to AI agents and shows you what to fix. This policy covers what we collect, how we use it, how long we keep it, and your rights.

In short: we read your catalog and content settings to run the audit, and — when the order-data features are enabled for your store — we read your order data for two things: to show which AI agent referred an order, and to rank your products by recent sales so you fix the ones that matter most. None of that involves your customers’ names, email addresses, phone numbers, or addresses. The one exception is a brief, single-customer lookup we run only when a GDPR data-subject or deletion request names that customer, and we do not store what we read there (see “GDPR, CCPA, and your rights” below). On the paid plan, when you ask us to fix a product description, we use AI (Anthropic and OpenAI, via Vercel) to draft it from your store’s own business content — never your customers’ personal data — and we never use your data to train AI models. Shopify handles all payments, so we never see card details. On the paid plan, after you grant an optional permission, we can apply a fix you ask for, such as setting an unlisted product to active. That change writes only product settings; it never touches personal data and is usually reversible from the app.

1. What we collect

When you install AgentChannel on your Shopify store, we read store data through the permissions you approve during install. The data we collect is:

• Catalog and content configuration. Your products, collections, pages, articles, store policies, metaobjects, publications, and theme settings — read to run the AI Readiness Audit and show you which Shopify field to change for each gap.
• Order data. When the order-data features are enabled for your store, we read your orders for two purposes. First, to show which orders, if any, came from AI shopping agents: we look at an order’s referral and channel information (such as the publication or the website a shopper came from) to identify which AI agent, if any, sent that order. Second, to rank your products by recent revenue: once a day we add up the last 30 days of order line items into a per-product sales total, so the app can show you the highest-impact products to fix first. We do not read your customers’ names, email addresses, phone numbers, or addresses to do this. See “How long we keep it” for what we store and for how long.
• Analytics access (read-only, nothing stored). Your install grants the app Shopify’s analytics/reporting permission (read_reports). The app uses it only to (1) check, once a day, whether Shopify has yet made its AI-agent attribution columns available to apps, and (2) build a link that opens your own native Shopify analytics pre-filled for AI-agent sales. The app does not copy or store your reports or analytics data — that data stays in Shopify.
• Store domain and app authorization. Your .myshopify.com domain, the encrypted Shopify access token, and the permissions you granted, so the app can call Shopify on your behalf.
• Account and contact information. The email address associated with your shop and any messages you send our support, so we can run your account and reply to you.
• Audit results. The findings each audit produces, so you can review them and track them over time.
• Free no-install audit. If you run the free audit at agentchannel.app/audit, we read your public storefront pages and query Shopify’s public agent catalog. To email you the full report, we collect the email address you enter and use it to send the report and related follow-up about your audit. Every such email has an unsubscribe link, and we keep a short suppression record so we can honor your opt-out.
• Anonymous app usage. Aggregate, non-identifying events about how the app is used, so we can improve it.

What we do not collect. We do not build or store profiles of your customers, and we do not store customer names, email addresses, phone numbers, or shipping or billing addresses anywhere in our database. We read order data only as described above (referral and channel information, and line-item sales totals), not customer contact details. Separately, when a Shopify GDPR data-subject or erasure request names a specific customer, we read that one customer’s email and phone from Shopify to check our records for a match; we discard what we read once the request is fulfilled and never write it to our database (see “GDPR, CCPA, and your rights” below). Shopify processes all payments, so we never see your customers’ payment card details, and we never move money. The optional write permissions (see “How we use it”) let us change a product’s visibility status and, if you complete the brand-voice setup, save your brand-voice settings; neither grants access to personal data.

2. Website visitors, cookies, and analytics

Our marketing website (agentchannel.app) uses analytics to understand how the site is used. Google Analytics 4 sets cookies (such as _ga) and shares aggregate visit data with Google; we also use Vercel Analytics, which is cookieless; and we use PostHog for own-product analytics, which runs on both the marketing website (under the same cookie consent as Google Analytics, counting visitors under an anonymous identifier until a store is connected) and the embedded admin app inside the Shopify admin (cookieless there, identifying the store by shop domain rather than a browser cookie). We use these only to measure and improve the site and app, never to build advertising profiles, and we do not sell this data. On the marketing website, optional Google Analytics, PostHog and Vercel Analytics load only after you choose Accept or Allow analytics, wherever you visit from. Decline and Turn analytics off save your choice in a first-party consent cookie for one year. Use “Privacy choices” on any page to withdraw or give permission. Withdrawal disables future Google collection, opts out of PostHog, blocks future Vercel Analytics events and removes accessible Google Analytics cookies on this domain. It cannot recall events already sent. Global Privacy Control (GPC), whether sent as a request header or exposed by your browser, keeps optional analytics off even if an earlier choice allowed it. Google explains its collection at How Google uses information from sites that use its services. This section is about the marketing website — the app itself, inside the Shopify admin, does not set cookies for Google Analytics or Vercel Analytics.

If you use the contact form on the marketing website, we email what you enter (your name, email address, store URL if given and message) to our support inbox through Resend so we can reply to you.

3. How we use it

We use the data above to run the AI Readiness Audit and show you the results: whether AI agents find your store, whether resellers outrank you, where the facts are wrong, and the exact Shopify field to fix each gap — and, on the paid plan, to apply the fixes you authorize (below). When the order-data features are enabled, we use your order data for two things: to show which AI agent referred each order, and to rank your products by recent sales so you can prioritize the highest-impact fixes. We do not use any of this data for anything else. The AI Readiness Audit is deterministic: we compute the findings directly from your store data, with no AI. Separately, on the paid plan, when you ask us to draft a product-description fix, we send that store content (never your customers’ personal data) to an AI provider to generate a draft you review before applying — see “Service providers.” We never use your data to train AI models.

Lawful bases (EU/UK). Where we act as the controller of your own account data (such as login, billing, support, and marketing) and you are in the European Economic Area or the United Kingdom, we rely on these GDPR bases: contract, to provide the Service to you under our Terms; legitimate interests, to operate, secure, and improve the Service, balanced against your rights (you can object to processing based on legitimate interests); and legal obligation, where the law requires it. We send marketing email only with your consent, which you can withdraw at any time.

Applying a fix (paid plan). After you grant the optional edit permission (you can decline it, and revoke it later), and only when a fix is requested from your store, we apply the change you approved — for example setting an unlisted product to active or updating a product description — one at a time. Anyone with access to AgentChannel in your Shopify admin can request a fix, so manage that access through your Shopify staff permissions. Each change is recorded and usually reversible from the app, and writes only the product content you approved; it does not write or change any order, customer, or payment data.

4. How we share it

We do not sell your data. We share it only with the infrastructure providers listed in “Service providers” below (bound by data-processing terms and acting on our instructions) and, for our marketing website, the analytics described in “Website visitors, cookies, and analytics.”

5. Where data is stored, and security

Your data is stored in a Supabase Postgres database in the us-east-1 region (Northern Virginia, USA). Each store’s data is walled off from every other store at the database level through row-level security policies. All data is encrypted in transit and at rest. If we become aware of a personal-data breach affecting your data, we will notify you without undue delay so you can meet your own notification obligations.

AgentChannel’s infrastructure is located in the United States. Where we process personal data of individuals in the EU or UK, we make that data available for transfer under an appropriate safeguard — primarily the European Commission’s Standard Contractual Clauses (with the UK International Data Transfer Addendum where UK data is involved), which we enter into with merchants as part of our data-processing terms. We do not currently rely on the EU–U.S. Data Privacy Framework.

6. How long we keep it

• Audit results, store configuration, and fix history: kept while you have AgentChannel installed, then deleted when you uninstall, as described in “Uninstall and deletion.”
• Order-derived data (AI-agent attribution and per-product sales totals): kept while you have AgentChannel installed, then deleted when you uninstall, as described in “Uninstall and deletion.” The per-product sales total is an aggregate figure; it does not identify any individual order or customer.
• Free no-install audit results: kept for 30 days, then automatically deleted. The unsubscribe suppression record is kept longer so we can keep honoring your opt-out.
• Anonymous app usage: aggregated and retained without identifying any individual.

7. Uninstall and deletion

When you uninstall, your data is immediately hidden and all background work stops. About 48 hours later Shopify sends a shop/redact signal and we permanently delete your records (the same deletion applies if we terminate your access). That 48-hour gap is a safety net: reinstall within it and your audit history returns; after it, the data is gone (encrypted backups expire on their own within about 7 days, consistent with the GDPR principle of keeping personal data no longer than necessary).

8. GDPR, CCPA, and your rights

For your customers’ personal data, you (the merchant) are normally the data controller and Shopify acts as your processor; Shopify forwards its compliance and data-subject webhooks to apps. To the limited extent AgentChannel processes any such data, it does so as a processor on your behalf and only on your instructions. We do not store your customers’ personal profiles (no names, email addresses, phone numbers, or addresses). We may hold order-level records used to attribute an order to an AI agent, which can include a Shopify order reference and the referral or channel a shopper came from. AgentChannel implements the three required Shopify compliance webhooks, and acts on each:

• customers/data_request — a request to see a customer’s data. We automatically search the records we hold keyed to that customer and send the merchant any matches; requests scoped to specific orders are fulfilled manually until automated order-keyed export is in place. We confirm the result.
• customers/redact — a request to delete a customer’s data. We delete any matching order-attribution record we hold, by customer and by order. Fulfilling this request also requires us to briefly read that customer’s email and phone from Shopify, so we can check whether your brand-voice settings capture anything written about them and remove it if so; we discard that email and phone once the check is done and never add them to our database. We confirm the result.
• shop/redact — sent about 48 hours after uninstall; we permanently delete your store’s data, including your audit history and the order-derived attribution and sales-total records.

Your responsibilities as the controller. As the data controller for your customers’ data, you are responsible for your own compliance: for telling your customers, in your store’s privacy policy, that you use AgentChannel and what it does, and for having a lawful basis for the data your store collects. AgentChannel processes data only on your documented instructions and within the scope described here, and does not change your obligations to your customers.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, to withdraw consent, and to lodge a complaint with your data protection authority. EU/UK residents have these rights under GDPR; California residents have similar (but not identical) rights under CCPA/CPRA, including to know, delete, correct, and opt out of the sale or sharing of personal information. To exercise any of them, email support@agentchannel.app and we will respond within the legal timeframe (about one month under GDPR; within 45 days under CCPA/CPRA). If your request concerns data we process on behalf of a merchant, we will refer you to that merchant as the controller.

9. Service providers

We use a small set of trusted providers (“subprocessors” in GDPR language) to run AgentChannel, each bound by data-processing terms and acting only on our instructions. They are:

• Vercel — cloud hosting that runs the AgentChannel web app.
• Inngest — background-job orchestration; receives your shop domain and job triggers (such as audit and redact events), not your catalog contents.
• Supabase — managed database storage, a Postgres database in the United States (us-east-1) where your audit and order-derived data is held, encrypted and isolated per store.
• Resend — email delivery, for compliance and operational email and to send free-audit reports; these carry the recipient’s email address and the message itself.
• Anthropic and OpenAI (routed through the Vercel AI Gateway) — AI providers that, on the paid plan, draft product-description fixes from your store’s business content. We send only your store content for this — never your customers’ personal data — and we do not allow them to train models on it.
• Google Analytics — marketing-website analytics only, as described in “Website visitors, cookies, and analytics.”
• Sentry — error and crash reporting for the AgentChannel admin app and marketing website, so we can find and fix failures. Error reports carry technical details (the error message, stack trace, and request metadata) and are scrubbed before they leave our infrastructure: email addresses, shop subdomains, Shopify record identifiers, and authorization tokens are redacted, IP capture is suppressed, and request bodies are never sent. Never your customers’ personal data.
• PostHog — product analytics for the AgentChannel admin app and marketing website (which features you use, funnel measurement). In the admin app, and on the marketing website once your store is connected, events are identified by your shop domain; before then, marketing-website visitors are counted under an anonymous identifier, under cookie consent. Never customers’ personal data; session recording and autocapture disabled.

Separately, Shopify, Inc. is the platform your store runs on and the source of the catalog and content data we read; your relationship with Shopify is governed by Shopify’s own terms and privacy policy.

On the paid plan, AgentChannel uses AI (Anthropic and OpenAI, routed through the Vercel AI Gateway) to draft product descriptions you ask us to fix. We send only your store’s business content — never your customers’ names, email addresses, phone numbers, or addresses — and we never use your data, or allow these providers to use it, to train AI models. The free AI Readiness Audit itself uses no AI. Our use of AI is also governed by our AI Addendum.

10. Children

AgentChannel is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy as the product changes. Material updates are emailed to active merchants and announced on the AgentChannel admin dashboard, and the “Last updated” date above shows when we last revised it. If we add a feature that collects new data or uses a new subprocessor, we will update this page before turning it on.

12. Contact

Privacy questions, data requests, or security disclosures: support@agentchannel.app.