Privacy Policy

AnswerNode for Shopify

Last updated: 25 September 2026

1. Who this covers

AnswerNode is an AI assistant that a Shopify merchant installs on their store. This policy describes what AnswerNode does with personal data on behalf of that merchant.

There are two different relationships here:

The merchant is our customer. For their own account data we are the controller.
The merchant’s shoppers are not our customers. For their data we are a processor, acting only on the merchant’s instructions — the merchant is the controller.

AnswerNode is owned and operated by GetGabs LLP, G14, GF, Okay Plus Spaces, Malviya Nagar Industrial Area, Jaipur, Rajasthan 302017, India. Contact: support@getgabs.com.

2. What we collect, and why

From the merchant’s store

Data	Why	Kept
Store domain, name, email, country, currency	To identify the store and create its account	Until uninstall + 48 hours
Product titles, descriptions, prices, stock and links	Only when the merchant switches on product sync, so the assistant can answer about what they sell	Until sync is switched off, or the app is uninstalled

Product sync is off by default. Nothing is read from the catalogue until the merchant turns it on.

From shoppers who use the chat

Data	Why
Message content	To answer the question
An anonymous visitor identifier	To keep one conversation together across page loads
Name, email, phone, company — only if the merchant enables a pre-chat form, and only what the shopper types	To pass to the merchant, and to fill in forms the assistant completes
An order number, and the email or phone a shopper gives to prove an order is theirs	To verify the order belongs to them before saying anything about it

We do not use cookies to track shoppers across websites, and we do not build advertising profiles.

Order data

When a shopper asks about an order, AnswerNode reads it from Shopify at that moment and does not store it. What the assistant is given is limited to:

the order number and order date;
its status and, where available, a tracking number and link;
the items ordered.

It is never given the delivery address, the email or phone on the order, or any payment detail. This is enforced in the software by building the reply from a fixed list of permitted fields — not by instructing the AI to withhold them.

3. What we never do

We do not sell personal data.
We do not share it with advertisers or data brokers.
We do not use a merchant’s or a shopper’s data to train AI models.
We do not read the merchant’s customer records. AnswerNode does not request permission to access them at all.

4. Who else processes data

Who	What they receive	Why
OpenAI	Message content, and the knowledge extracts relevant to a question	To generate the reply, and to turn knowledge into a searchable form. Sent through their API, which is not used for model training.
Anthropic or Google (only if the merchant selects that model)	The same	Alternative AI providers a merchant can choose
Shopify	The API requests the app makes on the store’s behalf	The platform the app runs on
Our infrastructure provider	Everything stored	Hosting and backups. We will name them on request.

The search index that stores knowledge extracts runs on our own servers. It is not a third-party service.

If a merchant supplies their own AI provider key, their data goes to that provider under their own agreement with it.

5. Security

All traffic is over HTTPS.
Access credentials for a merchant’s store are encrypted at rest.
Requests from Shopify are verified cryptographically before being acted on.
Access to production systems is limited to staff who need it.

No system is perfectly secure, and we do not claim otherwise. If a breach affects personal data, we will notify affected merchants without undue delay.

6. How long we keep things

While the app is installed: conversations and their knowledge base are kept so the assistant can do its job, and so the merchant can read their own chat history.
On uninstall: the store’s access credentials are deleted immediately. Conversations are kept for 48 hours, because reinstalling within that window is common and a merchant who returns to an empty app has to set everything up again.
48 hours after uninstall, if the merchant has not returned, Shopify sends a deletion request and the store’s data is deleted.
On a shopper deletion request forwarded by Shopify, that shopper’s conversations, messages, stored memories and action logs are deleted.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to some processing.

Shoppers should contact the store they bought from. That store controls the data; we act on its instructions. Requests that reach us directly are forwarded to the merchant.
Merchants can contact us at support@getgabs.com.

Deletion requests that reach us through Shopify are handled automatically and do not need to be asked for twice.

8. Children

AnswerNode is not directed at children, and we do not knowingly collect their data.

9. Changes to this policy

We will update this page when what we do changes, and change the date at the top. Material changes are notified to merchants in the app.

10. Contact

GetGabs LLP
G14, GF, Okay Plus Spaces, Malviya Nagar Industrial Area,
Jaipur, Rajasthan 302017, India
support@getgabs.com
GST: 08ABBFG0011F1Z6

This policy is governed by the laws of India. The courts of Jaipur, Rajasthan have exclusive jurisdiction over any dispute arising from it.