SEARCH AI
Data Processing Addendum
Last updated 6 August 2026
This addendum forms part of the agreement between the merchant ("Controller") and Search AI ("Processor") for the processing of personal data carried out when Search AI is installed on the merchant's Shopify store. It applies automatically on installation; no signature is required.
1. Roles
The merchant is the Controller and determines the purposes of processing. Search AI is the Processor and acts only on the merchant's documented instructions, which are given by installing the app, configuring it, and using its features.
2. Subject matter and duration
Processing lasts for as long as the app is installed, plus the deletion period described in clause 7. The subject matter is the operation of a shopping assistant on the merchant's storefront.
3. Nature and purpose of processing
- Indexing the store's catalog so the assistant can search it
- Answering shopper questions and recommending products
- Reporting to the merchant on usage and, where enabled, attributed revenue
4. Categories of data subject and personal data
Data subjects are visitors to the merchant's storefront. The personal data processed is limited to:
| Category | Detail |
|---|---|
| Chat content | Free text a shopper types, which may incidentally contain personal data if the shopper chooses to include it |
| Pseudonymous identifier | A random token generated in the browser, not derived from and not linked to any identity |
| Order reference | Shopify order ID, number, total, currency and date, linked to a chat session. Only where the merchant enables revenue attribution. |
Search AI does not process names, email addresses, telephone numbers, postal addresses, IP addresses, customer account identifiers or payment data. No special categories of personal data are processed.
5. Subprocessors
The merchant grants general authorisation for the following subprocessors. Search AI will give notice through the app before adding or replacing one, allowing the merchant to object by uninstalling.
| Subprocessor | Function | Location |
|---|---|---|
| Anthropic, PBC | Generating assistant replies | United States |
| Voyage AI | Text embeddings for semantic search | United States |
| Neon Inc. | Database hosting | United States |
| Vercel Inc. | Application hosting | United States |
Chat content sent to Anthropic and Voyage AI is not used to train their models.
6. Security
- All data in transit is encrypted with TLS
- All data at rest is encrypted by the database provider
- Storefront requests are authenticated by Shopify's app proxy signature, so a request can only ever read the catalog of the store it came from
- Access to production systems is limited to the app's operator
- Data minimisation is enforced in the design: the app does not request access to Shopify's customer records at all
7. Retention and deletion
- Chat transcripts and usage events are deleted automatically after a period the merchant sets, 90 days by default
- On uninstallation, all data for the store is permanently deleted when Shopify issues its shop redaction request, 48 hours afterwards
- Order references survive transcript deletion so revenue reporting remains accurate, with the link to the chat session removed at that point
8. Data subject rights
Because the app holds no identifiers for a shopper, it cannot locate an individual's data on request, and there is correspondingly nothing to disclose in response to an access request. Deletion requests received through Shopify are honoured: the app erases the order references for the orders Shopify identifies. Search AI will assist the merchant with any further request to the extent technically possible.
9. Consent
Where the merchant operates a consent banner, Search AI reads the shopper's decision through Shopify's Customer Privacy API and stores no persistent identifier and no cart tag where consent has been withheld.
10. International transfers
Personal data is processed in the United States. Where the merchant is established in the EEA or the UK, the parties rely on the applicable Standard Contractual Clauses, which are incorporated into this addendum by reference.
11. Audit
Search AI will make available the information reasonably necessary to demonstrate compliance with this addendum on the merchant's written request.
12. Breach notification
Search AI will notify affected merchants without undue delay, and in any event within 72 hours, of becoming aware of a personal data breach affecting their store.
Questions about this document: michael@wip.fyi