1. Introduction
Purcise ("we," "our," or "us") is a provider of AI Brand Agent technology that enables intelligent customer support and personalized shopping experiences. This Privacy Policy explains how we collect, use, and protect your personal information when you:

• Use our AI Brand Agent Services
• Integrate our solution on your website or Shopify store
• Access our website and related offerings

By using or accessing our Services, you agree to this Privacy Policy. If you do not agree with these practices, please discontinue use of our Services.

Our Role as Data Controller vs. Data Processor

• Data Controller: For personal information we collect about our own Customers (e.g., account registration, billing details, website visitors), Purcise is the “data controller.”

• Data Processor / Service Provider: When we process end-user data (e.g., chat logs, personal details) on behalf of our Customers, we act as a “data processor” under the GDPR or “service provider” under certain U.S. state laws. Our Customers remain the “data controllers” for that end-user data.

2. Scope and Types of Users
This Privacy Policy applies to two main categories of users:

1. Customers: Business owners or administrators who install our Shopify application or integrate our AI Customer Support Agent on their websites.

2. End Users: Visitors to our Customers’ websites who interact with our AI chatbot or related Services.

3. Information We Collect

3.1 Customer Information

• Account Data: Name, email, phone number, address, company name, and billing information to manage your account and subscriptions.
• Shopify / Website Integration Data: Store domain, app configuration, product info, order data (as needed to power our AI).
• Content and Knowledge: Publicly accessible information (e.g., product pages, website text) and any additional brand or product info you provide internally (e.g., brand guidelines, FAQs) to guide our AI Brand Agent’s responses.
• Payment/Transaction Data: Collected by third-party payment processors (e.g., Stripe); Purcise does not store full card numbers.
• Account Credentials: Login username/password (stored securely).
• Communication Preferences: Subscription status for marketing emails, notifications, etc.

3.2 End User Information
• Chat Interactions: Messages exchanged with our AI Brand Agent, including shopping inquiries or support questions.
• Shopping Preferences: Product interest, chat-based preferences, or behaviors that help personalize user experience.

3.3 Automated Collection (Cookies and Similar Technologies)
We and our service providers may automatically collect certain technical and usage information via cookies, web beacons, and similar technologies. This can include:
• Usage data and analytics
• Device and browser identifiers
• Interaction data for AI analytics and improvements

For more details, see Section 11 (Cookie Policy) below.

4. How We Use Your Information

4.1 For Customers

1. Service Provision: To create and maintain your account, handle billing, and provide technical support.
2. Integration: To connect with Shopify or other platforms for seamless AI-driven support.
3. Improvements: To analyze usage, fix bugs, and develop new functionalities or features.
4. Communications: To send operational updates, respond to inquiries, and provide service-related alerts.
5. Legal and Security: To comply with legal obligations, detect fraud, and ensure security.

4.2 For End Users

1. AI-Powered Support: Provide real-time assistance, product recommendations, or answers to questions.
2. Personalization: Tailor recommendations based on shopping or browsing behavior.
3. Analytics and Service Improvement: Improve our chatbot’s accuracy, language understanding, and performance.
4. Fraud Prevention and Security: Protect our systems and data from malicious activity.

4.3 AI Model Training or Improvement
We may use anonymized or aggregated conversation data to enhance our AI capabilities. Such data does not identify individuals once anonymized. Where required by law, we will seek consent before using end-user data for these purposes.

5. Integration with ChatWoot
We use ChatWoot to facilitate the live-chat interface on our Customers’ websites:
• ChatWoot Privacy Policy: Because ChatWoot operates as a separate platform, its collection and use of data (including analytics and IP addresses) may be governed by its own Privacy Policy and terms.
• Data Sharing: We integrate ChatWoot into our AI Brand Agent so end-user chats can be displayed and managed. ChatWoot may collect non-personal and personal data (e.g., browser type, IP address) to provide, secure, and improve its services.
• Scope: If you have questions about how ChatWoot processes your data, you can consult their privacy policy or contact them directly at privacy@chatwoot.com.

6. Information Sharing and Disclosure
We do not sell personal data to third parties for monetary gain. However, we may share information in these circumstances:

1. Service Providers / Technology Partners: To help us with hosting, payment processing, analytics, customer support, email delivery, etc.
2. Business Transfers: If we are involved in a merger, acquisition, or sale of assets, user data may be transferred under similar confidentiality obligations.
3. Legal Compliance: To comply with legal requirements or respond to lawful requests, subpoenas, court orders, or to protect rights and safety.
4. Consent: When you explicitly agree to share or otherwise direct us to share your data.

7. Data Security and Storage
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure, including:
• Encryption of data in transit (TLS/SSL)
• Secure data center hosting
• Role-based access controls
• Regular security assessments and monitoring

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

8. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your own, including the United States. Where required by law (e.g., GDPR), we implement appropriate safeguards—such as Standard Contractual Clauses—to ensure your personal data is adequately protected.

9. Your Rights and Choices
Depending on your location and applicable law (e.g., GDPR, CCPA/CPRA), you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectify: Update or correct inaccurate data.
• Delete: Request deletion of certain information (subject to legal obligations).
• Object or Restrict: Limit or oppose certain types of data processing.
• Data Portability: Obtain a portable copy of data in a structured, machine-readable format.
• Withdraw Consent: Revoke any consent you previously gave (e.g., marketing emails).
• Lodge a Complaint: File a complaint with a relevant supervisory authority if you believe your rights have been infringed.

Marketing Opt-Out
To stop receiving marketing or promotional emails, click the “Unsubscribe” link in the email or contact us at privacy@purcise.com.

Cookies and Analytics
For information on how to manage cookies or opt out of certain analytics, see Section 11 or adjust your browser settings.

11. Retention of Information
We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. For example:
• Customer Account Data: Kept while your account is active and for a reasonable period afterward (e.g., 3-7 years) to comply with legal obligations (tax, accounting) or to resolve disputes.
• End User Chat Data: Retained as directed by our Customers. We may periodically delete older chats unless otherwise required by our contractual agreements.
• Aggregated / Anonymized Data: May be retained indefinitely for analytics and improvements, as it no longer identifies individuals.

12. Children’s Privacy
Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us at privacy@purcise.com so we can promptly delete it.

(Note for EU compliance: If you target EU users, consider specifying 16 as the minimum age in some cases, or clarifying compliance with local Member State rules.)

13. Cookie Policy
We use cookies and similar technologies to:
• Remember Settings: Session cookies and preference cookies that help us provide core functionalities.
• Analytics and Performance: Google Analytics or similar tools to understand user interactions and improve our Services.
• Personalization: Track user behavior to tailor chatbot interactions or product recommendations.
• Advertising (If Applicable): Provide relevant ads or measure ad performance (with consent, if required).

You can manage your cookie preferences through your browser settings or via our cookie banner (if available). Disabling cookies may affect functionality, but you’ll still be able to use most features of our site.

14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:
• Post the revised version on our website with an updated “Last Updated” date.
• Provide additional notice where required (e.g., via email or a prominent notice on our site).

Please review this Policy periodically for any updates.

15. Contact Information

If you have any questions, concerns, or wish to exercise your data protection rights, you may contact us at:

Email: privacy@purcise.com
Address:
Purcise (Privacy Team)
150 Sutter St, PO Box #774
San Francisco, CA 94104
United States

16. Additional Information for Specific Jurisdictions

16.1 For European Economic Area (EEA) Residents

If you are located in the EEA, you may have additional rights under the GDPR. We will comply with GDPR requirements, such as entering into Standard Contractual Clauses (where applicable) for any transfers of your personal data outside the EEA.

(If you must appoint an EU representative or DPO, list them here or state that you will update this section once appointed.)

16.2 For California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you may have specific rights such as:

• Right to Know: Request categories and specific pieces of personal information collected.
• Right to Delete: Ask us to delete personal information (subject to certain exceptions).
• Right to Opt-Out of Sale/Sharing: We do not sell personal data for monetary gain.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights.

To submit a request, contact us at legal@purcise.com.

17. Legal Basis for Processing
We process personal data under the following legal bases:
• Contract Performance: When processing is necessary to fulfill our contractual obligations to you (or our Customers).
• Legitimate Interests: For improving our Services, preventing fraud, or ensuring security—where these interests are not overridden by your rights.
• Legal Obligations: To comply with legal or regulatory requirements (e.g., tax, accounting).
• Consent: Where required by law (e.g., certain marketing emails, certain cookies), we rely on your consent. You can withdraw consent at any time by contacting us.