Privacy Policy

1. Information We Collect

Account Information

• Email address
• Name (if provided)
• Password (encrypted)
• Payment information (processed by Stripe)

Usage Information

• Agent configurations and settings
• Instance metadata (type, region, status)
• Service usage and activity logs
• Technical data (IP address, browser, device)

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Send service-related notifications
• Respond to support requests
• Improve and optimize the Service
• Ensure security and prevent fraud
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may collect and process your data:

Amazon Web Services (AWS)

Infrastructure provider for hosting your agents. Your agent data and configurations are stored on AWS servers in the region you select.

Supabase

Database and authentication provider. Your account information, agent metadata, and usage data are stored in Supabase.

Stripe

Payment processor. Stripe collects and processes your payment information according to their privacy policy.

4. Data Processing Consent

By using the Service, you consent to the processing of your data as described in this Privacy Policy, including:

• Storage and processing of data on third-party cloud services (AWS, Supabase)
• Transfer of data across international borders as required by cloud infrastructure
• Processing of payment information by Stripe
• Retention of data for the duration of your account plus applicable legal retention periods

5. Data Security

We implement reasonable security measures to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Encrypted storage of sensitive data
• Access controls and authentication
• Regular security updates

However, no system is completely secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active plus any applicable legal retention periods. When you delete your account:

• Account data is deleted or anonymized within 30 days
• Billing records may be retained for tax and legal compliance
• Backup copies may persist for up to 90 days

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data.

Self-Service Options

You can manage the following directly from your Account Settings:

• Correct your email address — Update your email at any time
• Delete your account and data — Permanently delete your account and all associated data (requires terminating active agents first)

Requests Requiring Support

For the following requests, please contact us at privacy@agent-launch.com:

• Access your personal data — Request a copy of all personal data we hold about you
• Export your data — Request your data in a portable format
• Correct other inaccurate data — Request corrections to data other than your email
• Withdraw consent — Withdraw consent for specific data processing activities

We will respond to privacy requests within 30 days. We may request verification of your identity before processing certain requests.

8. Cookies & Tracking

We use essential cookies for authentication and service functionality. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

Agent Launch is not intended for users under 18 years of age. We do not knowingly collect data from children.

10. Shopify App Integration

The Support Pilot Shopify app is published by Right Angles Technologies Inc. on the Shopify App Store. The following terms apply specifically to merchants who install Support Pilot on a Shopify store.

Data We Access From Your Shopify Store

When you install Support Pilot, you authorize the following access scopes via the Shopify OAuth flow:

• read_products — product titles, descriptions, prices, variants, and inventory status. Used to power product search and recommendations in chat responses.
• read_orders — order numbers, line items, fulfillment status, and tracking links. Used for email-verified order lookup so shoppers can self-serve order status inquiries.
• write_orders — used only to add internal notes or apply pre-approved actions (refunds, cancellations) when explicitly configured by the merchant.

Support Pilot never accesses customer payment methods, password hashes, or store financial reports. Access tokens are stored encrypted at rest and used only to fulfill chat queries on the merchant's storefront.

Data We Collect From Storefront Visitors (Shoppers)

• Chat conversation transcripts (messages sent to the AI agent)
• Email address — only if provided by the shopper for order lookup
• Anonymous session identifier (cookie or local storage) for conversation continuity
• Page URL and referrer at the time of chat (for context)

We do not collect shopper names, addresses, phone numbers, payment information, or browsing history outside of the chat session. The merchant is the data controller for shopper conversations; Right Angles Technologies Inc. is the data processor.

GDPR Mandatory Webhooks

In compliance with the Shopify Partner Program Agreement and GDPR, Support Pilot implements the three mandatory privacy webhooks:

• customers/data_request — On receipt, we compile any shopper chat transcripts associated with the requesting customer's email address and deliver them to the merchant within 30 days.
• customers/redact — On receipt, we permanently delete all chat transcripts and any stored email address for the identified customer within 30 days.
• shop/redact — Fires 48 hours after a merchant uninstalls the app. On receipt, we permanently delete the shop's installation record, access tokens, knowledge-base content, and all conversation history.

Data Retention After Uninstall

On app uninstall, we immediately revoke API access. Within 48 hours of uninstall (per Shopify's shop/redact webhook), all merchant data and shopper conversation history associated with the store are permanently deleted. Anonymized aggregate metrics (e.g., total conversations served) may be retained for service-quality reporting.

Subprocessors

In addition to AWS, Supabase, and Stripe listed in Section 3, the Support Pilot Shopify app uses:

• Anthropic (via Amazon Bedrock) — large language model provider. Chat messages are sent to Anthropic models hosted within AWS Bedrock for response generation. Bedrock does not retain or train on inference inputs.
• Shopify, Inc. — source of merchant product, order, and customer data under the access scopes listed above.
• Stripe, Inc. — handles subscription billing and any usage-based charges for the Shopify app. The Shopify Billing API is NOT used. Payment information is collected and stored by Stripe, not by Right Angles Technologies Inc. or by Shopify.

Privacy Requests

Merchants and shoppers may submit privacy requests (access, correction, deletion) by emailing privacy@agent-launch.com. Shopify-initiated webhook requests are processed automatically within the timeframes above.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at privacy@agent-launch.com