Privacy Policy

1. Introduction

Welcome to Amalia.ai ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and services.

Amalia.ai is operated by BEG CONSULTING LLC, a company registered in Delaware, United States. Our EIN is 88-1135029, and our registered address is 8 The Green Ste B, Dover, Delaware 19901.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Data We Collect

As a Shopify application, Amalia.ai collects and processes the following types of data:

2.1 Customer Data from Shopify Stores

When you connect your Shopify store to Amalia.ai, we automatically collect and process customer data from your store, including:

• Customer names
• Email addresses
• Phone numbers
• Shipping and billing addresses
• Order information (order numbers, products, order status)
• Purchase history

2.2 Merchant Account Data

When you create an account with Amalia.ai, we collect:

• Business name and contact information
• Shopify store connection details
• WhatsApp Business API credentials (360dialog)
• Automation preferences and settings

2.3 Usage Data

We automatically collect information about how you use our services, including:

• Log data (IP addresses, browser type, access times)
• Message delivery status and analytics
• Feature usage statistics

3. How We Use Your Data

We use the collected data for the following purposes:

• Order Management: To send WhatsApp order confirmations for Cash on Delivery (COD) orders
• Customer Care: To provide automated customer support via WhatsApp using our AI chatbot
• Cart Recovery: To send automated cart abandonment messages to customers
• Shipping Updates: To notify customers about order status and shipping information
• Service Improvement: To analyze usage patterns and improve our services
• Communication: To send you important updates about your account and our services

Important: We do NOT sell, rent, or share your data with third parties for marketing purposes. Your data is used solely to provide the services you have requested.

4. Third-Party Services

Amalia.ai integrates with the following third-party services to provide our functionality:

4.1 Shopify

We connect to your Shopify store via OAuth to access customer and order data. This connection is established with your explicit consent, and you can revoke access at any time through your Shopify admin panel. Shopify's privacy policy applies to data collected through their platform.

4.2 WhatsApp Business API (360dialog)

We use 360dialog as our WhatsApp Business API provider to send messages to your customers. When you send messages through Amalia.ai, the message content and recipient information are processed by 360dialog in accordance with their privacy policy and Meta's WhatsApp Business API terms.

4.3 OpenAI

We use OpenAI's GPT-4o-mini model to power our AI chatbot for customer care. When customers interact with the chatbot, their messages and relevant context (product information, order history) are sent to OpenAI to generate responses. OpenAI processes this data according to their privacy policy and data processing agreement.

4.4 Supabase

All data is stored securely on Supabase, a cloud database platform. Our data is stored in Supabase's EU region to ensure compliance with GDPR requirements. Supabase implements industry-standard security measures to protect your data.

5. Data Retention

We retain your data for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Customer Data: Retained for the duration of your active subscription and for up to 90 days after account termination, unless you request earlier deletion
• Order Data: Retained for as long as required for order fulfillment and customer support purposes
• Message History: Retained for up to 2 years for customer support and analytics purposes
• Account Data: Retained until you delete your account or request data deletion

You can request deletion of your data at any time by contacting us at support@amaliatech.ai.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request a copy of all personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a machine-readable format
• Right to Object: You can object to processing of your data for certain purposes
• Right to Withdraw Consent: You can withdraw consent for data processing at any time

To exercise any of these rights, please contact us at support@amaliatech.ai. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure authentication and access controls
• Regular security audits and updates
• Row-level security (RLS) for multi-tenant data isolation

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: