Privacy Policy

1. Who We Are

Agent Savanna is a Shopify-embedded analytics app that generates AI-powered weekly insight reports for e-commerce merchants. The app is developed and operated by:

Agentti Savanni Oy Business ID: 3555811-9 Espoo, Finland privacy@agentsavanna.ai

When you install Agent Savanna, you (the merchant) act as the data controller for your store's data. We act as your data processor under GDPR Article 28. The terms of that relationship are set out in our Data Processing Agreement.

2. Scope

This policy covers data processing that occurs through the Agent Savanna Shopify app, including optional connections to Google services described in Section 10. It does not cover Shopify's own data practices.

3. What Data We Access

When you install Agent Savanna, the app requests or may request the following Shopify API access scopes:

• read_orders, read_all_orders — Access to your store's order data, including orders older than 60 days. Used to calculate revenue metrics and trends.
• read_products — Access to your product catalogue. Used to identify top-performing products and product-level insights.
• read_reports — Access to Shopify's built-in analytics and reports. Used to supplement traffic and performance data.
• read_analytics — Access to Shopify's analytics data. Used for traffic analysis and conversion metrics.
• read_customers — Access to customer data. Used to identify new versus returning customer patterns. No individual customer data is stored.

We also receive basic store metadata from Shopify during installation, such as store currency and timezone.

4. What We Store — and What We Don't

Our core privacy principle: we never store individual orders or customer personal data.

All data accessed through the Shopify API is aggregated into weekly metrics before it is stored. Only these aggregated numbers — revenue totals, order counts, averages, traffic summaries, and similar statistical measures — are saved in our database. The same principle applies to data sent to AI model providers: they receive only aggregated metrics, never individual-level data.

We do not store:

• Customer names, email addresses, or contact details
• Shipping or billing addresses
• Payment information or credit card details
• Individual order contents or transaction records
• Customer browsing behaviour

We do store:

• Store metadata (currency, timezone)
• Aggregated weekly metrics (revenue, order counts, averages, traffic data)
• AI-generated insight reports produced for your store

5. How We Use Your Data

We process your data solely to provide the Agent Savanna service: extracting data from Shopify and from other services you have connected, calculating aggregated metrics, and generating AI-powered weekly insight reports displayed within your Shopify admin panel.

We do not sell, rent, or share your data with third parties for marketing or advertising purposes. We do not use your data for any purpose other than providing and improving the service.

Our legal basis for processing is that it is necessary to perform the service you have contracted for.

6. Sub-Processors

We use the following third-party service providers to operate the service:

• Google Cloud Platform — EU (Belgium) — Infrastructure and database
• Google AI — United States — AI-powered analysis
• OpenAI — United States — AI-powered analysis
• Anthropic — United States — AI-powered analysis
• Mistral AI — EU (France) — AI-powered analysis

AI providers receive only aggregated metrics — never individual order data or customer personal data.

If we add new sub-processors, we will notify you at least 14 days in advance.

7. International Data Transfers

All stored data is held on Google Cloud Platform in the EU (region europe-west1, Belgium). Sensitive credentials are encrypted at rest.

When AI-powered analysis is performed, aggregated metrics may be sent to AI providers located in the United States. The data sent is aggregated and contains no personal data.

Where transfers to the United States occur, they are protected by appropriate safeguards such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, and misuse. These include encryption of sensitive credentials, strict data isolation between stores, and confidentiality obligations for all personnel with access to store data.

9. Data Retention and Deletion

While installed: Your aggregated data and AI-generated reports are retained for as long as the app is installed on your store.

On uninstallation: Your store's operational data — connection credentials, aggregated metrics, and settings — is deleted promptly when you uninstall the app. Your AI-generated insight reports are retained for 30 days after uninstallation, so that they are restored if you reinstall the app, and are then permanently deleted.

What we keep: After deletion, we retain only a pseudonymised store identifier and a record that the store previously used the service. This cannot be used to identify individuals and is kept to prevent misuse of free access offers. Our legal basis for this is our legitimate interest in preventing abuse of the service.

On request: You can request deletion of your data at any time by contacting us at privacy@agentsavanna.ai. Deletion will be carried out without undue delay.

10. Google User Data (Google Analytics, Search Console, Google Ads)

Agent Savanna offers optional, read-only connections to Google services. These connections are always initiated by you and require your explicit authorisation through Google's sign-in (OAuth) flow. You can connect each service independently:

• Google Analytics 4 — aggregated weekly traffic and behaviour metrics for your chosen GA4 property, such as sessions, new versus returning visitors, and e-commerce funnel events.
• Google Search Console — aggregated weekly search performance metrics for your chosen site, such as impressions, clicks, click-through rate, and average position.
• Google Ads — aggregated weekly advertising performance metrics for your chosen account, such as ad impressions, clicks, and cost.

All Google connections are read-only. Agent Savanna never creates, modifies, or manages anything in your Google accounts — no campaigns, no settings, no content.

What we store: We store the aggregated weekly metrics listed above, and an encrypted credential (an OAuth refresh token, encrypted with AES-256-GCM) that lets the app retrieve your data each week. We never store Google access tokens.

How we use Google user data: Google user data is used solely to generate your own weekly insight reports, shown to you inside the app. The same aggregation principle described in Section 4 applies: only weekly aggregates are stored. Data from one connected platform is never shared with another platform, and your Google data is never shown to any other merchant.

Google user data and AI: Aggregated Google-derived metrics are processed by the AI sub-processors listed in Section 6 solely to generate your reports, under agreements that prohibit those providers from using the data to train their models. We do not use Google user data to develop, improve, or train generalised artificial-intelligence or machine-learning models.

Human access: Google user data is not read by humans, except with your explicit permission, where necessary for security or troubleshooting purposes, or where required by law.

Limited Use disclosure: Agent Savanna's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: You can disconnect any Google service at any time from within the app — this revokes our access and deletes the stored credential and the Google-derived data for that service. You can also revoke Agent Savanna's access directly in your Google Account at https://myaccount.google.com/permissions. All Google-derived data and credentials are also deleted when you uninstall the app.

11. Data Breach Notification

In the event of a data breach that affects your data, we will notify you within 72 hours with a description of what happened, which data was affected, and what measures we have taken in response.

12. Your Rights Under GDPR

As a data controller, you have rights regarding the data we process on your behalf. You may request:

• Access — confirmation of what data we hold and a copy of it
• Rectification — correction of inaccurate data
• Erasure — deletion of your data
• Restriction — limitation of how we process your data
• Portability — a copy of your data in a structured, machine-readable format
• Objection — to object to specific processing activities

To exercise any of these rights, contact us at privacy@agentsavanna.ai. We will respond without undue delay.

13. Cookies and Tracking

Agent Savanna does not use cookies and does not perform any client-side tracking.

The Agent Savanna website (agentsavanna.ai) is covered by its own Website Privacy Policy.

14. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app. The "Last updated" date at the top indicates when the policy was last revised.

15. Contact

If you have questions about this privacy policy or our data practices:

Agentti Savanni Oy Espoo, Finland privacy@agentsavanna.ai