Privacy Policy

1. Who we are

Badveli Nikhil Kumar Reddy, My Home Avatar, Hyderabad, Telangana, India - 500089, runs Askshelf and is responsible for the personal data described here. Contact us at support@askshelf.in.

2. In short

• Nothing leaves your store until a store manager clicks “Connect Askshelf”.
• Customer names, emails, phone numbers, addresses and IP addresses are never read or sent.
• We do not store your questions, the answers or your store data.
• We store your account’s email address and plan, your site’s address and version numbers, and how many questions you asked.
• The plugin adds no cookies and no tracking.

3. What stays in your store

Your conversations are saved in your own WordPress database, per user, along with the plugin’s settings and its connection details. We cannot see them. Uninstalling the plugin deletes them.

4. What we receive when you connect

Connecting takes you to askshelf.in to sign in to, or create, an Askshelf account, with Google or with an email address and password, and approve the connection. We then receive the store’s home URL and its WordPress, WooCommerce and Askshelf version numbers, and return a site ID and a secret, which the store uses to sign short-lived tokens for each question.

5. What we receive when you ask a question

• your question, and the earlier questions and answers in the same conversation;
• the results of the read-only lookups the AI asks for, such as sales totals, product names and order numbers, never customer names or contact details;
• your store’s date, time zone, currency and locale;
• a token signed by your store, valid for 10 minutes.

Questions that contain an email address or phone number are refused in your browser and never sent; the service checks again. We pass the rest to an AI model through OpenRouter, limited to model providers that do not store or train on the data, and stream the answer back. Once the answer is shown, the question, answer and lookup results are not kept.

6. What we store

• for your account: your email address, how you sign in, your plan, and on a paid plan your Dodo Payments customer and subscription IDs;
• for each connected store: site ID, secret, home URL, version numbers, the account it belongs to, and when it was connected and last used;
• for each question: its status (answered, declined or failed), the number of AI calls and the number of tokens used;
• for each month: the number of questions counted and tokens used.

We use this to run the service, enforce plan limits, bill paid plans and see what the service costs. Our hosting provider also keeps short-lived request logs, including IP addresses, for security.

7. Paid plans

If you choose a paid plan, payment is taken by our payment provider, Dodo Payments, as merchant of record. It collects your payment details, name, email address and billing country under its own privacy policy. We receive your name, email address, country and plan status, never your full card number.

8. This website

This website sets no cookies and uses no analytics. It loads fonts from Google Fonts, which receives your IP address. If you email us, we keep your email address to reply, and nothing else. Ask us and we delete it.

9. Who processes data for us

• Supabase: hosts the service and its database.
• OpenRouter, and the AI model providers it routes to: answer questions, without storing or training on them.
• Dodo Payments: takes payments for paid plans.
• Google Fonts: serves this website’s fonts.

10. Legal basis

We handle your account and store data to provide the service you asked for when you signed up and connected (performance of a contract), and request logs and usage counts to keep the service secure and fair (legitimate interests).

11. How long we keep it

• Questions, answers and lookup results: not kept after the answer is shown.
• Account details: while your account is open. Ask us and we delete your account.
• Site records and usage counts: while the store is connected, then up to 24 months for billing and accounting.
• Request logs: as long as our hosting provider keeps them, typically a few days.
• Support emails: as long as needed to help you, or until you ask us to delete them.

12. Where data is processed

Our providers may process data outside your country, including in the United States. Where the law requires it, transfers are covered by standard contractual clauses or an equivalent safeguard.

13. Your rights

You can ask to see, correct or delete the data we hold about you or your store, or object to how we use it. Email support@askshelf.in with the store’s address and we will reply within 30 days. You can also complain to your local data protection authority.

14. Changes

We will update this page when what we collect changes, and give notice in the plugin or by email for significant changes.