Privacy Policy

1. Introduction

Qubify Inc. ("Qubify," "we," "us," or "our") operates the Qubify AI commerce assistant platform accessible at https://qubify.ai and via our Shopify application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service, join our waitlist, or interact with our website.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Waitlist Registration: Name, email address, and Shopify store URL when you join our waitlist.
• Account Information: Business name, contact details, billing information, and account credentials when you create an account.
• Knowledge Base Content: Product descriptions, FAQs, policies, and other content you upload to train your AI assistant.
• Communications: Messages, feedback, and support requests you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, click patterns, and interaction logs.
• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Cookies & Tracking Technologies: Session cookies, analytics cookies, and similar technologies (see Section 7).

2.3 Shopify Store Data

When you connect your Shopify store to Qubify, we access data through the Shopify API as authorized by you. This may include:

• Product catalog, inventory, and pricing information
• Order details, tracking information, and fulfillment status
• Customer profiles (name, email, order history) as needed to respond to customer inquiries
• Store settings, shipping zones, and return policies

We only request Shopify API scopes necessary to provide the Service. We do not access payment card data or Shopify Payments credentials.

2.4 Customer Conversation Data

When your store visitors interact with the Qubify AI assistant widget, we process conversation data including messages, questions, and responses. This data is used to provide the Service, improve AI accuracy, and generate analytics for your dashboard. End-customer conversations are processed on your behalf as a data processor.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Qubify Service
• Train and personalise your AI assistant based on your store's knowledge base
• Process and respond to customer inquiries on your behalf
• Send you waitlist updates, product announcements, and service notifications
• Analyse usage patterns to improve our platform and develop new features
• Detect, prevent, and address technical issues, fraud, and abuse
• Comply with legal obligations and enforce our Terms of Service
• Communicate with you about your account, billing, and support requests

We do not sell your personal data or your customers' data to third parties for advertising purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are:

• Contract Performance: Processing necessary to provide the Service you have requested.
• Legitimate Interests: Improving our platform, preventing fraud, and communicating about our Service.
• Consent: Where you have given explicit consent (e.g., marketing communications). You may withdraw consent at any time.
• Legal Obligation: Where processing is required to comply with applicable law.

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist us in operating the Service (cloud hosting, analytics, email delivery, payment processing). These providers are contractually bound to protect your data and may only use it to provide services to us.
• AI Model Providers: We use large language model (LLM) APIs to power the AI assistant. Conversation data may be transmitted to these providers in anonymised or pseudonymised form. We do not permit these providers to use your data to train their own models without your explicit consent.
• Shopify: As required to operate the Shopify integration in accordance with Shopify's Partner Program Agreement.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• Legal Requirements: When required by law, court order, or government authority, or to protect the rights, property, or safety of Qubify, our users, or the public.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfil the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Account data is retained for the duration of your account and for up to 90 days after account deletion.
• Conversation logs are retained for up to 12 months to enable analytics and AI improvement, after which they are anonymised or deleted.
• Waitlist data is retained until you request removal or we launch the Service.
• Billing records are retained for 7 years as required by applicable tax and accounting laws.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function (authentication, session management). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website (e.g., page views, traffic sources). You may opt out via your browser settings or our cookie preference centre.
• Functional Cookies: Remember your preferences and settings to improve your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and least-privilege principles
• Regular security audits and vulnerability assessments
• Incident response procedures and breach notification protocols

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

9. International Data Transfers

Qubify operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure that such transfers comply with applicable data protection laws, including through the use of Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.
• Opt-out of Marketing: Unsubscribe from marketing communications at any time via the link in our emails.
• California Residents (CCPA): Right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected] and we will take steps to delete such information.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or a prominent notice on our website. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: