Privacy policy

Last updated 5 October 2026

ShopPilot helps online shops manage products, stock, orders, money and customer chats, with an AI assistant that answers a shop's customers. It is run by the ShopPilot team. This page explains what information ShopPilot keeps about two groups of people: shops that use ShopPilot, and customers who write to a shop that uses ShopPilot.

If you run a shop on ShopPilot

We keep what is needed to run your shop:

• Your account: your name, your email and a protected form of your password. If you sign in with Facebook, the name and email Facebook gives us instead of a password.
• Your shop: its name, logo, contact details, and the payment QR and bank details you choose to show your customers.
• What you and your staff enter: products and photos, stock, orders, customers, suppliers, promotions and money records.
• Your staff list, each person's role, and a record of who did what in the shop.
• The chat apps you connect (Facebook Page, Instagram account, Telegram bot, WhatsApp number) and the access keys they give us, stored encrypted.
• Your plan, the plan payments you make to ShopPilot (amount, reference and date) and how much AI your shop used.
• The questions you ask Pilot, the helper inside the app, so it can answer and so we can improve its answers.

Your customers pay you directly. The money never passes through ShopPilot, and we never see your bank login.

If you write to a shop that uses ShopPilot

The shop decides what to sell and how to answer; ShopPilot runs the assistant for it. We receive and keep:

• The messages you send to the shop on Facebook Messenger, Instagram, Telegram or WhatsApp, and the replies sent back. Where the shop has switched it on, also your public comments under the shop's posts.
• Pictures you send, such as a payment screenshot: the shop sees them in the chat, and the AI may read a payment screenshot to check the amount.
• Your identifier in that chat app and your name as the chat app shows it to the shop. On Facebook and Instagram the identifier is specific to the shop's Page and is not your profile.
• What you give to place an order: your name, phone number, delivery address and what you ordered.
• The language you write in, whether you asked to stop, and whether a person at the shop took over the chat.
• If you started the chat from an advertisement, which advertisement it was.

We do not receive your password for any chat app, your friends, your other conversations or your profile.

How it is used

• To run the shop's work: answering customers, taking orders, keeping stock and money records, and showing reports to the shop.
• To pass your chat to a person at the shop when you ask, or when the assistant cannot help.
• To show the shop which questions the assistant could not answer, so it can improve.
• To count usage and keep the service working and safe.

We do not sell your information and we do not use it for advertising.

The assistant is an AI

Replies are written by an AI model. To write a reply, the text of your message and the shop's product information are sent to our AI provider, Anthropic. The assistant tells you it is an AI, and you can ask for a person at any time.

Who can see it

• The shop and only that shop's staff, each according to their role. Each shop's data is kept separate from every other shop's.
• The companies that run parts of the service for us: Supabase (database and files), Cloudflare (hosting), Anthropic (AI) and Brevo (sign-in emails and the emails about your plan and payments).
• The chat app the conversation takes place on (Meta for Messenger, Instagram and WhatsApp; Telegram), under its own terms and privacy policy.
• The ShopPilot team, when a shop asks for help or when it is needed to keep the service working and safe.

How long we keep it

A conversation is kept for 3 months after its last message (a shop may choose a different period, between 1 and 24 months), so the assistant can continue the chat and the shop can see what customers ask. After that the conversation, its messages and your contact are removed automatically, about once a month. Before they are removed, a summary report is made for the shop: counts and the most frequent questions, with example wordings that have phone numbers, emails and links replaced and that leave out anything naming the customer. The report contains no names and no Facebook IDs, and is kept. If you sent "stop", we keep only a bare marker (your Page-scoped ID, without your name) so that you are never messaged again. You can also ask us to delete yours at any time; see below.

A shop's own records (products, orders, customers, money) are kept for as long as the shop uses ShopPilot, and are deleted when the shop asks us to delete it.

Your choices

• Send stop in the chat and the assistant stops replying until you write again.
• Ask for a person and the shop takes over the conversation.
• Ask us to delete the information we hold about you: see how to request deletion.
• If you run a shop: export your data to Excel, correct it in the app at any time, or ask us to delete your shop.

Security

Access tokens are stored encrypted, each shop can see only its own data, and access to the database is restricted. No online service is perfectly secure, and we will tell affected shops if something goes wrong that affects them.

Changes

When this page changes, the date at the top changes, and we tell shops in the app about important changes.

Contact

Questions about this policy: leangporpo1@gmail.com.

The rules for using ShopPilot: Terms of use.