Privacy policy
Last updated October 1, 2026
Mint AI Assistant is a Shopify app made by Mint Labs ("we", "us"). It adds a chat to a merchant's online store that answers shoppers' questions from the store's own products, pages, policies and shipping settings, can show the status of an order, and lets shoppers send a question to the store's team. This policy explains what the app handles about merchants and about the merchant's shoppers, why, and when it's deleted. For shopper data we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The assistant's knowledge is the store's own public content: products, published pages, policies, shipping zones and rates, and answers the merchant adds.
- Chats are stored for the merchant (90 days by default; the merchant can choose 30–180 days) and then deleted automatically.
- Email addresses and long numbers (phone or card numbers) typed into the chat are replaced with a placeholder before anything is stored or sent to the AI model.
- A shopper's email address is kept only if they type it into the "message the team" form and tick "Email me the reply" (it is never pre-ticked).
- Order status is read live from Shopify only after the shopper enters the order number and the email used at checkout. Order details are never sent to the AI model or stored.
- We never sell or share data, use it for advertising, or combine it across stores. The AI provider doesn't use it to train models.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read the store's products, pages, policies, shipping settings and (Pro) the order a shopper asks about. |
| Store name, currency, primary domain, the store's public contact email and the store owner's email | To name the store in the chat, show shoppers the contact email when the assistant can't help, and send hand-off notifications. |
| Settings: greeting, suggested questions, assistant name, order status and hand-off options, notification email, retention period | To run the chat the way the merchant set it up. |
| Answers the merchant adds in the app (questions and answers) | Used by the assistant as the merchant's own information. |
| Plan and subscription status, read from Shopify (Shopify App Pricing, looked up with your store's Shopify ID); monthly count of AI replies with the tokens and compute units the AI provider reported | To decide which features apply, apply the plan's monthly limit and monitor costs. Payments are handled entirely by Shopify. |
The store content the assistant uses
Text from active products published to the online store (title, description, type, vendor, tags, options, collections), published pages, the store's policies and its shipping zones, countries and rates is stored in our database and as search vectors, together with each product's price range (used only to narrow down budget questions). This is the merchant's public storefront content; it is updated when products change and every 6 hours for pages, policies and shipping, and deleted when the store is deleted.
Information about the merchant's shoppers
| Information | How it's used | Kept |
|---|---|---|
| Chat messages (with emails and long numbers replaced), the assistant's replies and the sources it used, the store page where the chat started, the storefront language | To answer the shopper, keep the conversation going, and let the merchant read chats, answer hand-offs and see questions the assistant couldn't answer. | The store's retention period (default 90 days) |
| The shopper's question and recent turns of the same chat, plus excerpts of the store's content | Sent to the AI model (Meta Llama 3.3 on Cloudflare Workers AI) to write the answer. Cloudflare doesn't use this content to train AI models or share it with other customers. | Not stored by the AI service |
| Email address typed in the "message the team" form, only with "Email me the reply" ticked (Pro) | To email the store team's reply to the shopper, on the store's behalf. | With the chat (retention period) |
| Order number and checkout email typed in the order status form (Pro) | Compared with the order in Shopify to confirm it's theirs. Wrong combinations get the same answer as unknown orders. | Not stored or logged |
| The order shown: order number, date, status, shipments with carrier, tracking number and link, estimated or actual delivery date, item names and quantities | Read live from Shopify and shown only to the shopper who entered the matching order number and email. A note "Order status shown: #1001 (in transit)" is added to the chat for the store team. | Order details: not stored. The note: with the chat |
| A keyed one-way hash of the visitor's IP address (never the address itself) | To limit how many messages, order lookups and hand-offs one visitor can send. | Up to 2 days |
| A conversation ID in the shopper's browser (localStorage) | So the chat continues across pages and shows the team's reply later. Only saved when Shopify's Customer Privacy API allows preferences storage for that shopper; otherwise the chat lasts for the page view. | Up to 7 days of inactivity, in the shopper's browser |
The app sets no cookies. Shoppers are told in the chat that answers come from AI, how long chats are kept, and not to share sensitive details.
Emails
Two kinds of transactional email are sent through Cloudflare Email Service from mail.stickermint.com: a notification to the merchant when a shopper messages the team (Pro, can be turned off), and the store team's reply to a shopper who asked for it. Nothing else is emailed, and no marketing email is ever sent to shoppers.
Customer privacy requests
- Access requests (Shopify's
customers/data_request): chats linked to that customer (by the email they gave for a reply, or by an order they looked up) are listed on the app home for the merchant to download and send to the customer. - Erasure requests (
customers/redact): those chats are permanently deleted. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store, including its search vectors.
Merchants can also delete any chat at any time in the app's Inbox.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database, search vectors, queues, AI model and email) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Chats are deleted after the store's retention period (default 90 days). Visitor rate-limit records are deleted after 2 days and monthly usage counts after 13 months. Access tokens are deleted as soon as the app is uninstalled, and everything else when Shopify sends the store deletion request 48 hours later.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; shoppers should contact the store they chatted with, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com