Privacy

What we collect

When you connect your store, Kebzy stores:

• Your store name and domain — so we know which store you're talking about.
• Your chat history — the messages you send and the replies you receive. This is how Kebzy remembers context across sessions.
• Store content you ask Kebzy to read or write — for example, product titles, descriptions, and theme text. Only what you explicitly ask us to work with.
• Usage information — how much of your daily allowance you've used, so we can keep the service running fairly.

We do not read or store your customers' personal data, payment information, or order history. Kebzy only asks for the permissions it actually needs.

Why we collect it

Solely to let the AI help you run your store. Your chat history lets Kebzy pick up where you left off. Your store content is only accessed when you specifically ask Kebzy to work with it.

How long we keep it

As long as you're a Kebzy customer. If you disconnect your store, your data is archived for up to 30 days and then permanently deleted. There is no going back after that — it's gone from our servers.

Where it's stored

Your data is encrypted at rest. The region is set when you first connect and does not change without your knowledge. We do not shuffle data between regions.

Your store access credential is locked to your store only. A copy of Kebzy's database cannot be used to access a different store — the credential only decrypts when paired with the correct store identity.

Who can see it

Only Kebzy's own systems. We do not share your data with third parties for marketing, analytics, or any other purpose. We use a third-party AI service to generate chat replies. Your messages are sent to that service to produce responses, under their standard data processing terms. We do not permit that service to use your messages to train their models.

Your rights

You can request a copy of everything Kebzy holds about you at any time. Send a request to [email protected] or use the export link in your account.

You can delete everything by going to Settings and clicking Disconnect. That wipes your stored credential permanently. We cannot undo it.

Legal bases (EU, UK, and California residents)

For merchants in the European Union, we process your data under GDPR on the basis of contract performance — you asked us to provide the service.

For merchants in the United Kingdom, the same applies under UK GDPR.

For merchants in California, CCPA applies. You have the right to know, delete, and opt out of sale. We do not sell personal data.

Cookies and tracking

We use one session cookie to keep you signed in. That's it. No advertising trackers. No Google Analytics. No Facebook Pixel.

Contact

Questions? Email [email protected]. We aim to reply within two business days.