Privacy policy
What data SeekGist collects, why, and your rights.
Needs lawyer review
This is a template. A qualified lawyer must review it before anyone uses or signs it. Words in [brackets] must be filled in.
Last updated: [date]. This policy explains what personal data [SeekGist legal entity name], [address] ("SeekGist", "we") collects, why, and what rights you have.
There are two groups of people:
- Store owners and their teams who use the SeekGist dashboard. For their data, SeekGist is the controller (we decide why and how it is used).
- Shoppers who search on a store that uses SeekGist. For their data, the store is the controller and SeekGist is the processor. The Data Processing Agreement covers this.
1. Data we collect
| Data | From whom | Why |
|---|---|---|
| Name, email, password (stored only as a hash), two-factor settings | store owners and team members | to run your account and keep it secure |
| Store name, settings, API keys (stored only as a hash) | store owners | to run the Service |
| Billing details | store owners, through our payment provider | to bill you; we do not store card numbers |
| Product catalog | the store | to build the search index; it should not contain personal data |
| Search queries and events (click, add to cart, order), with a random session id and the device type | shoppers, through the store | to return results, count usage, and show analytics to the store |
| Technical logs: IP address, browser, request id, time | everyone who calls the Service | security, abuse prevention and fixing errors |
| Assistant chats | shoppers, through the store | to answer the shopper and show the store its conversations |
By default SeekGist stores no shopper names, emails, phone numbers or addresses. Recent searches stay only in the shopper's browser. If a shopper types personal data into a search or a chat, it is stored as typed, like any other query.
2. Cookies and browser storage
sg_session: keeps you signed in to the dashboard. Needed for the Service.NEXT_LOCALE: remembers your language.- The theme (light or dark) and the widget's recent searches are kept in the browser's local storage.
We do not use advertising cookies. [Analytics cookies on the website, if any, to be listed.]
3. Legal bases
- To run the contract with the store (account, billing, the Service itself).
- Legitimate interests: security, abuse prevention, and improving the Service.
- Legal duties, for example tax records.
- Consent, where the law requires it.
4. Who we share data with
We share data only with service providers who help us run SeekGist, under contracts that protect it ("subprocessors"):
| Subprocessor | What for | Where |
|---|---|---|
| [hosting provider] | servers and databases | [country] |
| [payment provider] | billing | [country] |
| [email provider] | account and billing emails | [country] |
| [AI model provider] | query rewriting, translation, assistant (the text of the query, product data, chat messages) | [country] |
We do not sell personal data. We may share data if the law requires it.
5. International transfers
If data leaves [country/region], we use safeguards the law accepts, such as standard contractual clauses. [To be confirmed.]
6. How long we keep data
- Account data: while your account exists, then [period].
- Search logs and events: [period]. Each store can set a shorter period.
- Technical logs: [period].
- Billing records: as long as tax law requires.
7. Your rights
Depending on where you live, you can ask to see, correct, export or delete your data, to limit or object to its use, and to complain to a data protection authority. Shoppers should first contact the store; we help the store answer. Store owners can export and delete their store's data in the dashboard. Contact: [privacy contact email].
8. Security
API keys and passwords are stored only as hashes. Platform access tokens are encrypted. Each store's data is kept apart from other stores' data in the database. Traffic is encrypted with TLS. Team access uses roles, and important actions are written to an audit log.
9. Children
SeekGist is a business service and is not meant for children.
10. Changes
We will post changes here and tell store owners by email before important changes take effect.