1. Information We Collect
- Account information: name, email address, and password when you register.
- Business information: organization name, website URL, and Shopify store details.
- Usage data: pages visited, features used, and interaction logs within the platform.
- Payment information: processed securely via PayU. We do not store card details on our servers.
- Chat data: conversations between your customers and the AI chatbot on your website.
- Shopify store data: when a merchant connects their Shopify store, we access product catalog, inventory, orders, discounts, and customer data (name, phone, address) via the Shopify Admin API, solely to power chatbot responses.
2. Shopify Customer Data
- When a merchant installs 1Minute AI on their Shopify store, we access specific customer data via the Shopify Admin API to enable the chatbot to answer shopper questions.
- Data accessed: customer name, phone number, shipping address, and order details including order status, fulfillment, and tracking information.
- Purpose: this data is used exclusively to answer shopper queries in real-time (for example, order status lookups). Shoppers authenticate by providing their phone number and order ID, which we match against the order record before revealing any order details.
- Data minimization: we fetch this data per-query and do not bulk-sync or maintain a separate copy of the merchant's customer database.
- Retention: customer data surfaced during a chat conversation is retained only as part of the conversation transcript for the merchant's reference. Transcripts are deleted on merchant uninstall or upon request.
- We do not sell, share, or use Shopify customer data for advertising, marketing, or any purpose other than the specific shopper query it was retrieved for.
3. How We Use Your Information
- To provide, maintain, and improve the 1Minute AI chatbot service.
- To process payments and manage your subscription.
- To send transactional emails such as invoices, alerts, and account notifications.
- To analyze usage patterns and improve our AI models and product features.
- To respond to your support requests and communications.
4. Data Storage and Security
All data is stored on secure cloud infrastructure (Convex, Vercel, AWS). We use industry-standard encryption (TLS 1.2+) for data in transit and encryption at rest for all stored data. Shopify access tokens and API credentials are stored encrypted in AWS Secrets Manager under tenant-isolated paths. Chat embeddings and AI training data are stored in isolated, per-organization environments. We do not share your data or your customers' data with third parties for advertising purposes.
5. Third-Party Services
- Convex — backend database and real-time infrastructure.
- Clerk — authentication and user management.
- Groq / Google Gemini — AI model inference for chat responses. Shopper queries may be sent to these providers to generate responses. These providers do not retain query data for training.
- PayU — payment processing. Governed by PayU's privacy policy.
- Firecrawl — website crawling for AI training data.
- AWS Secrets Manager — secure storage of API credentials and access tokens.
- Shopify — for merchants who connect their store, data flows are governed by Shopify's Partner Program Agreement and API Terms of Service.
6. Cookies
We use essential cookies to maintain your session and authentication state. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.
7. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days before permanent deletion. Shopify store data is retained only for as long as the app is installed on the merchant's store; upon uninstall, all associated data is deleted within 48 hours via Shopify's mandatory shop/redact webhook. Individual customer data is deleted upon request via Shopify's customers/redact webhook. You may request immediate deletion of any data by contacting support@1minute.in.
8. Your Rights
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate or incomplete data.
- Deletion: request deletion of your personal data.
- Portability: request your data in a portable format.
- Opt-out: request that we stop processing your personal data.
- For shoppers interacting with chatbots deployed by merchants: the merchant is the data controller, and requests should be directed to them in the first instance. We will honor all valid deletion requests relayed through Shopify's customers/redact webhook.
- To exercise any of these rights, email support@1minute.in.
9. Children's Privacy
1Minute is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related concerns, contact us at support@1minute.in or write to us at: 1Minute AI, Bangalore, Karnataka, India.