Privacy Policy

This Privacy Policy explains how Maestro Commerce ("Maestro", "we", "us") collects, uses, and protects information in connection with the Maestro AI Search Bar application for Shopify (the "App") and the maestrocommerce.ai website. By installing the App or using our website, you agree to the practices described here.

Who this policy is for

Maestro serves two audiences: merchants who install the App on their Shopify store, and shoppers who use the search experience on a merchant's storefront. We act as a data processor on behalf of the merchant for shopper data, and as a data controller for the merchant account information we hold directly.

Information we collect

From merchants

• Account and contact details (store name, domain, email) provided during installation.
• Shopify catalog data (products, collections, descriptions, prices, images, publication status) used to power and rank search.
• Order and checkout event data used to attribute search activity to revenue and to produce analytics.
• Configuration and settings you choose inside the App.

From shoppers

• Search queries and the text entered into the search bar.
• Interaction events such as searches run, results shown, results clicked, and add-to-cart and purchase signals tied to a search session.
• A first-party attribution identifier stored in the maestro_sid cookie, used to connect a search session to a resulting order so merchants can measure search-driven revenue.
• Technical data such as device type, browser, and approximate locale needed to render the widget correctly.

We do not ask shoppers for, and the App does not require, sensitive personal information. We do not sell personal information.

How we use information

• To provide AI-powered search: understanding shopper intent, matching it to the merchant's catalog, and generating helpful product descriptions and answers.
• To produce merchant analytics and recommendations (for example, search engagement, conversion, and revenue influenced by search).
• To attribute orders to search sessions for revenue measurement.
• To operate, secure, debug, and improve the App and our models.

AI processing

Search queries and catalog text are processed by large language and embedding models to interpret intent, rank results, and generate copy. Queries are not used to train third-party foundation models, and we configure our model providers to exclude submitted content from their training where that option is available.

Sharing and subprocessors

We share data with infrastructure and AI subprocessors strictly to provide the service, including cloud hosting and database providers and AI model providers. These subprocessors are bound by contractual confidentiality and data-protection obligations. We disclose information if required by law or to protect the rights and safety of users.

Data retention

Search and analytics event data is retained for up to 36 monthsand then purged on a rolling basis, unless a merchant requests earlier deletion. Merchant account data is retained for the life of the account and deleted after uninstall in line with Shopify's requirements.

Data deletion and your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Merchants can request deletion of their store's data by uninstalling the App or contacting us. Shoppers should direct requests to the merchant whose store they used; we will assist the merchant in fulfilling them. We honor Shopify's mandatory data-request and data-erasure webhooks.

Cookies

The App sets a first-party maestro_sid cookie for search-to-order attribution. It contains a random session identifier, not personal details. Our website may use essential and analytics cookies; you can control cookies through your browser settings.

International transfers and security

Data may be processed in regions where we or our subprocessors operate. We apply administrative, technical, and organizational safeguards appropriate to the risk, including encryption in transit and access controls.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data can be sent to privacy@maestrocommerce.ai. You can also reach us through our contact page.