Privacy & security
Privacy policy
This page explains what Talk To My Shop collects, why we collect it, who receives it, and the choices you have.
Who we are
Talk To My Shop connects a WooCommerce store to AI assistants you choose. The service is operated by Nguyen Dat Tran (ALYNX), Albrechtstraße 18, ASAP Innovations, 45130 Essen, Germany. Contact us at support@talktomy.shop.
What we collect
- Account details. Your name and email address from our hosted sign-in provider, WorkOS, and an internal account ID that links your account to your stores.
- Store connection details. Your store’s address and name, its currency, and the ID of the WooCommerce key. The WooCommerce consumer key and secret are stored encrypted and are never shown to your AI assistant. The key is Read-only unless you turn on changes for that store, in which case it is a Read/Write key.
- Authorization records. When you approve an AI assistant, we record that connection, the one store you selected for it, and whether you allowed changes. Access tokens are stored in hashed or encrypted form.
- Usage records. For each tool call we record your account ID, the store ID, the AI assistant’s client identifier, the tool name, whether the call succeeded, and the time. We do not record your prompts, the assistant’s replies, or the contents of store responses.
- Change log. If you turn on changes, each change an AI assistant makes is recorded with the store, the assistant’s client identifier, the tool, the item changed, the field, the old and new values, and the time. You can review the log in your dashboard.
- Billing records. If you subscribe to a paid plan, we store your Stripe customer and subscription identifiers and the plan status. We do not store payment card data.
- Request data. We limit request rates by IP address. Our usage and store records do not include IP addresses. Our hosting provider, Cloudflare, processes requests and may keep standard logs under its own terms.
Store information an assistant can read
When an assistant calls one of our tools, we read only the fields that tool returns. Examples are product names, SKUs, stock status, order numbers, order dates, order totals, and line items. We do not return customer names, email addresses, postal addresses, or order notes, and we do not keep copies of store content. The assistant you connected receives the results you request and handles them under its own privacy policy.
Why we use this information
- To sign you in, connect your store, and answer requests from the assistants you authorize.
- To keep the service secure, prevent abuse, and investigate problems.
- To answer support requests and meet legal obligations.
Where EU or UK data protection law applies, our legal bases are performing our agreement with you, our legitimate interest in keeping the service secure, and compliance with legal obligations.
Who receives information
- Cloudflare hosts the service, stores our database and key-value data, and processes requests.
- WorkOS provides sign-in, sessions, and account identity.
- Stripe processes payments for paid plans. We store only Stripe customer and subscription identifiers, never payment card numbers. See our plans page for plans.
- Cloudflare Web Analytics provides aggregated page-view measurements on our public pages. It does not use cookies or cross-site tracking. It is not loaded on the AI approval page.
- Your AI assistant, such as ChatGPT or Claude, receives the tool results you request.
- Your WooCommerce store is contacted using the key you provide.
Read access, optional changes and the change log
By default an AI assistant can only read your store. Changes are off until you turn them on for a store in your dashboard, and each AI app must also be approved for changes separately when you connect it. When changes are on, the assistant can only update product details (regular and sale amounts, stock, status, description and SEO text), change an order’s status, and add an order note. It cannot issue refunds, delete anything, or edit customer data. Every change is recorded in the change log in your dashboard. You can turn changes off at any time; since a WooCommerce key cannot be downgraded by us, you can also revoke the Read/Write key in WooCommerce.
Security
Store keys are encrypted with a key held only as a server secret. Sign-in uses hosted sign-in and sealed session cookies. Forms are protected against cross-site request forgery, and approval links can be used once. We do not collect payment card data.
How long we keep information
We keep account and store records while your account is active. Removing a store deletes its saved credentials immediately and stops access. Usage records are kept only as long as needed to run and secure the service.
Your choices and rights
- Disconnect a store at any time from your dashboard.
- Revoke the WooCommerce key under WooCommerce → Settings → Advanced → REST API.
- Disconnect the AI assistant in that assistant’s connector settings.
- Ask for a copy of your information, a correction, or deletion of your account by emailing support@talktomy.shop.
If EU or UK data protection law applies to you, you can also object to processing and complain to your local data protection authority.
Children
Talk To My Shop is a business service for store owners and is not directed to children.
Changes to this policy
We will publish changes on this page and update the date above. If a change materially affects you, we will tell you before it takes effect.