Your Privacy Matters

3.1 From Merchants (Store Owners)

When you install the ReComAI application, we automatically access certain information from your store, including:

• Store Information — Store name, website URL, platform type (Shopify, WooCommerce, Magento, or custom)
• Account Information — Email address, name, and account credentials associated with your store platform
• Product Data — Product names, descriptions, prices, categories, images, and inventory details
• Order Data — Order history, purchase patterns, cart data, and transaction information
• Customer Data — Your store's customer profiles, purchase history, and behavioral data (as permitted by your platform)
• Live Policies — Shipping policies, return policies, and other store policy content you configure within ReComAI
• Usage Data — How you interact with ReComAI's dashboard, features, and settings

3.2 From End Customers (Shoppers)

When shoppers interact with the ReComAI chatbot or recommendation widget on your store, we may collect:

• Conversation Data — Messages sent to and from the AI chatbot
• Behavioral Data — Pages visited, products viewed, items added to cart, and browsing patterns
• Session Data — Device type, browser type, IP address, and session timestamps
• Purchase Intent Data — Products the customer is interested in, search queries, and cart contents

3.3 From Website Visitors

When you visit our website (recomai.one), we collect:

• Usage Data — Pages visited, time spent, clicks, and navigation patterns
• Device Data — IP address, browser type, operating system, and device type
• Referral Data — Source that referred you to our website
• Cookie Data — Information collected via cookies and similar tracking technologies

4.1 To Provide the Service

• Deliver AI-powered product recommendations to your customers
• Operate and maintain the ReComAI chatbot and recommendation engine
• Process and respond to customer queries via the AI assistant
• Sync product, order, and customer data to power personalized recommendations

4.2 To Improve the Service

• Analyze usage patterns to improve AI recommendation accuracy
• Monitor and troubleshoot technical issues
• Develop new features, capabilities, and improvements
• Train and enhance AI models for better recommendation quality

4.3 To Communicate With You

• Send service-related notifications and updates
• Respond to your support requests and queries
• Send product updates, feature announcements, and important notices
• Send marketing communications (only with your consent — you may opt out at any time)

4.4 To Ensure Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and platform policies

5.1 How AI Processes Your Data

• Product data, order data, and customer conversation data may be processed by OpenAI's API to generate recommendations and chatbot responses
• OpenAI processes this data solely to provide the functionality requested
• We do not permit OpenAI to use your data for training their general models without explicit consent

5.2 Conversation Data

• Customer conversation data is processed only to provide chatbot functionality
• Conversations are used to improve AI response quality and recommendation accuracy within ReComAI
• Conversation data is not sold, shared with advertisers, or used for unauthorized purposes

5.3 AI Transparency

• ReComAI's chatbot is powered by artificial intelligence and is not a human agent
• Merchants can configure and customize the AI's behavior through the ReComAI dashboard

6.1 Where Your Data Is Stored

All data collected and processed by ReComAI is stored on Amazon Web Services (AWS) servers located in India. We have chosen India-based infrastructure to ensure data residency compliance for Indian merchants and to maintain high standards of data security.

6.2 How We Protect Your Data

• Encryption — Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls — Strict role-based access controls limit who can access your data
• Security Audits — Regular security reviews and vulnerability assessments
• Secure Infrastructure — AWS provides ISO 27001 and SOC 2 certified infrastructure

6.3 Data Retention

• We retain your data for as long as your account remains active or as needed to provide the Service
• If you uninstall or terminate your account, your data will be deleted within 30 days of account closure
• We may retain certain information longer if required by law or for legitimate business purposes such as dispute resolution

7.1 Service Providers

We work with a small number of trusted third-party service providers who help us operate and improve our services:

All service providers are contractually bound to:

• Keep your information confidential
• Process data only as instructed by us
• Maintain appropriate security standards

7.2 Platform Billing

ReComAI uses Shopify Billing for subscription and payment processing for Shopify merchants. We do not directly process or store payment card information. Billing on other platforms is handled through the respective platform's billing system.

7.3 Legal Requirements

We may disclose your information when required by law, including:

• In response to valid legal process such as a court order or subpoena
• To comply with applicable laws and regulations
• To protect the rights, property, or safety of ReComAI, our merchants, or others
• To prevent or investigate suspected illegal activity or fraud

7.4 Business Transfers

If Destinova AI Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

7.5 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

9.1 Shopify Merchants

When you install ReComAI from the Shopify App Store, we access your store data through Shopify's API with the permissions you grant during installation. We comply with Shopify's Partner Program requirements and API usage policies.

9.2 WooCommerce Merchants

ReComAI integrates with WooCommerce via our plugin or API. Data accessed includes products and customer information as configured during setup.

9.3 Magento Merchants

ReComAI integrates with Magento via our extension or API. Data handling follows the same standards described in this policy.

9.4 Custom Platform Merchants

For merchants using custom platforms, data is shared via our API integration. The merchant is responsible for ensuring their use of our API complies with their own privacy obligations to their customers.

11.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

11.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information.

11.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (such as legal obligations).

11.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

11.5 Right to Data Portability

You have the right to request that we provide your personal information in a structured, commonly used, and machine-readable format.

11.6 Right to Object

You have the right to object to our processing of your personal information where we rely on legitimate interests as the legal basis for processing.

11.7 Right to Withdraw Consent

Where we process your information based on your consent, you have the right to withdraw that consent at any time.

12.1 Legal Basis for Processing

• Contractual Necessity — To perform our contract with you and provide the ReComAI service
• Legitimate Interests — To improve our services, ensure security, and prevent fraud
• Consent — For marketing communications and certain data processing activities where consent is required
• Legal Obligation — To comply with applicable laws and regulations

12.2 International Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including India (AWS servers) and the United States (OpenAI). We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Compliance with applicable data transfer mechanisms

12.3 Data Protection Authority

If you are an EEA resident and believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority. A list of EEA data protection authorities is available at edpb.europa.eu.

If you are in the UK, you may contact the UK Information Commissioner's Office at ico.org.uk.