Privacy Policy

This policy explains what personal data AgentMySite collects, why, who processes it on our behalf, and the choices you have. It covers our website (agentmysite.com), the admin panel, the AgentMySite chat widget that site owners embed on their websites, and the AgentMyShop app for Shopify stores.

Who we are

AgentMySite provides an AI assistant that businesses add to their websites and Shopify stores. It answers visitors' questions from the business's own content and can hand conversations over to the business's support team.

For the data site owners and merchants give us about their own accounts, we are the controller. For the data their visitors and shoppers share in the chat, the site owner or merchant decides how the assistant is used and we process that data on their behalf. If you chatted with an assistant on someone else's website or store, that business's own privacy policy also applies, and they are usually the best first contact for requests about your data.

Data we collect

Site owners and merchants

• Account: your email address (you sign in with a one-time code sent to it), your sites, their allowed domains, and your settings.
• Content: pages we crawl from your website and files you upload, the text extracted from them, the passages we split it into, and their embeddings (numeric representations used for search).
• Billing and usage: your plan, billing status, the payment provider's customer and subscription references, the last four digits of your card, and the credits and tokens each conversation uses.
• Integrations: if you connect a helpdesk for support handoff, its credentials, encrypted at rest.
• Live demo on agentmysite.com: the email address and website URL you enter. We build a temporary trial assistant from that website.

Visitors and shoppers who chat with the assistant

• A random visitor ID that the widget stores in the browser, so a returning visitor can see their conversation.
• Conversations: your messages, the assistant's replies, the sources it cited, and any actions it took for you, such as tool calls and their results.
• Page address: the website and page path where the chat was opened. We leave out the query string and fragment.
• Details the site owner passes to the widget: on some websites the owner shares your customer ID, name or email with the assistant so it can recognize you.
• Support tickets: if you ask to reach a person, the contact email, optional phone number and summary you confirm. They're sent to the site owner's helpdesk.
• Voice: if voice is enabled and you use it, your voice clips are sent to our speech provider to turn them into text. We keep the resulting text as part of the conversation and don't store the recordings ourselves.
• Usage events in AgentMyShop, such as a product added to the cart with the assistant's help or a search that found nothing, linked to the visitor ID.

Data from Shopify stores (AgentMyShop)

• Store data: the store's name, domains and settings, plus the session data Shopify issues when the merchant opens the app.
• Catalog: products and collections, kept in sync through Shopify webhooks, so the assistant can recommend them.
• Logged-in shoppers: there's no separate AgentMyShop sign-in. We recognize a shopper only when they're logged in to the store, and then Shopify tells us their customer ID. The assistant can then show their orders and profile, which are read from Shopify when asked for and shown in the chat.
• Saved preferences: sizes, fit or colours a logged-in shopper asks the assistant to remember. We store them, and they're also saved on the shopper's customer record in the store's Shopify admin, where the merchant can see them. Shoppers who aren't logged in have nothing saved.
• Action log: actions the assistant took at the shopper's request, such as adding a product to the cart, with their inputs and outcome.

Our website

agentmysite.com stores your theme choice and live demo progress in your browser. It loads fonts from Google Fonts, which receives your IP address when the fonts load.

How we use it

• To provide the service: answer questions from the site owner's content, run the actions they enable, and create support tickets.
• To sign you in and keep accounts secure, including rate limits that prevent abuse.
• To show site owners and merchants their conversations, tickets and usage in the admin panel.
• To bill paying accounts and measure credit use.
• To send service emails, such as sign-in codes and ticket notifications.
• To follow up with people who try the live demo.

We don't sell personal data, and we don't use it for advertising.

AI processing

Answers are written by a large language model from Anthropic. To answer a question, we send Anthropic the message, the recent conversation, the most relevant passages from the site owner's content or store catalog, and the definitions and results of any tools involved. Anthropic is listed with our other sub-processors below.

Embeddings, the numeric representations we use to find relevant passages, are computed on our own servers with an open-source model. Site content isn't sent to a third-party embedding service.

AI answers can be wrong. The assistant is instructed to answer only from the site owner's content, and it cites its sources so you can check them.

Sub-processors

We use these service providers to run AgentMySite and AgentMyShop:

If a site owner connects their own helpdesk for support handoff, ticket details go to that helpdesk under the site owner's own account with it.

Retention

• Widget sessions use tokens that expire after 5 minutes. Voice recordings aren't stored.
• Trial assistants built by the live demo are deleted automatically when the trial ends. The email address and website URL you entered are kept so we can follow up.
• Chat transcripts that aren't linked to a logged-in shopper are deleted automatically after 12 months.
• When a merchant uninstalls AgentMyShop, the store is deactivated, the widget stops working and the app's Shopify sessions are deleted. About 48 hours later, Shopify asks us to erase the store's data, and we do (see below).
• After a store's data is erased, we keep only a non-personal usage record: a hashed store ID, the types of usage, their timestamps and the date the app was first installed. We use it to prevent free credits from being claimed again by reinstalling.
• When Shopify asks us to erase a shopper's data, we delete their saved preferences, linked chats and action history (see below).

For how long other data is kept, or to have it deleted, contact us at support@agentmysite.com.

Your rights and data requests

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it's used.

• Site owners and merchants: contact us at support@agentmysite.com.
• Visitors and shoppers: contact the business whose website or store you chatted on. They control the assistant and can ask us to act on your request. You can also contact us directly, and we'll work with that business.

Shopify data requests

AgentMyShop receives Shopify's privacy webhooks, which merchants trigger from their Shopify admin:

• Customer data request: we prepare an export of the shopper's saved preferences and the chats linked to them. The merchant can download it in the app for 30 days.
• Customer erasure: we delete the shopper's saved preferences, the chats and action history linked to them, and any pending data export. While the app is installed, we also remove the preferences field from their customer record in the store's Shopify admin.
• Store erasure (sent about 48 hours after a merchant uninstalls): we erase the store's data, keeping only the non-personal usage record described under Retention.

Security

• Every account's data is isolated from every other account's, and automated tests check this.
• The admin panel and the widget use separate, signed tokens. Widget tokens cover one site and one visitor and work only on the domains the site owner allows.
• The chat runs in a sandboxed iframe that can't read the host page, its cookies or its storage.
• Secrets live only in server environment variables. Helpdesk credentials are encrypted at rest.
• Traffic to our services is encrypted in transit (HTTPS).

Read more in our security documentation. To report a vulnerability, email support@agentmysite.com with "Security" in the subject line.

International transfers

We and our sub-processors may process personal data in countries other than the one you live in, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.

Children

AgentMySite isn't directed at children, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll delete it.

Changes to this policy

We may update this policy as the service changes. When we do, we'll change the "Last updated" date at the top, and we'll tell account owners about significant changes.

Contact

Questions or requests about privacy: support@agentmysite.com.