Security & privacy
Security and data privacy at Tycoon
Tycoon is designed to collect as little as it can. It never reads shopper names, emails, phone numbers or addresses, it deletes chat transcripts on a schedule, and it does not use your store's data to train AI models without your explicit written consent.
What customer data does Tycoon access?
Tycoon uses Shopify's protected customer data Level 1 with no protected fields. It requests access to orders but not to customers, and it never reads or stores customer names, emails, phone numbers or addresses. Order webhooks are filtered so customer fields are left out before the data reaches Tycoon.
From each order, Tycoon keeps a hashed order id, totals, currency, the purchased variant ids and a few flags. That is what your own revenue dashboard needs to compare shoppers who saw Tycoon with those who did not, and nothing more.
Order status lookups work differently. A shopper signed in to your store's customer account can ask about her own orders from the last 60 days (Starter plan and up). Tycoon answers only when she asks, and nothing about the order is stored.
What does Tycoon store, and for how long?
Tycoon stores chat transcripts, a minimal order record for your revenue dashboard, and the store facts you approved. Transcripts are deleted automatically when your plan's history period ends: 7 days on Free, 30 on Starter, 90 on Growth and 365 on Tycoon. Prices and stock are never stored; they are read live.
Conversations are keyed by an anonymous browser session id, never by a customer id, email or phone number. IP addresses are used only briefly for rate limiting, and only a salted hash that rotates daily is kept for a short time.
| Data | What is kept | How long |
|---|---|---|
| Chat transcripts | Messages, keyed by an anonymous session id | Free 7 days, Starter 30, Growth 90, Tycoon 365 |
| Order records | Hashed order id, totals, currency, variant ids, flags | For your revenue dashboard; deleted with the shop's data |
| Order status answers | Nothing | Not stored |
| Prices and stock | Nothing; read live per reply | Not stored |
| IP addresses | Salted, daily-rotating hash | Briefly, for rate limiting |
| Customer names, emails, phones, addresses | Never read | Not stored |
Is my store's data encrypted?
Yes. All traffic travels over TLS, and stored data is encrypted at rest by our infrastructure provider, Cloudflare, across its D1, KV and R2 storage. Shopify admin tokens get a second layer: they are additionally encrypted with AES-256-GCM, on top of the provider's encryption at rest.
How does Tycoon know which store a request comes from?
Every request is tied to a store through Shopify's own signature: an App Proxy HMAC on the storefront or a session token in the admin. Tycoon never trusts a store name sent by the browser. That keeps each shop's data, facts and learning separate from every other shop's.
This matters for an AI agent in particular. A shopper could type anything into a chat box, including text that tries to pose as another store or to give the AI new instructions (a prompt injection). Identity comes from the signature, not from the conversation.
What happens to data when a shopper or store asks for deletion?
Tycoon handles Shopify's mandatory compliance webhooks: customers/data_request, customers/redact and shop/redact. When a store uninstalls and Shopify sends shop/redact, Tycoon deletes all of that shop's data. Shoppers can also clear their own conversation at any time by tapping "Forget this chat" inside the chat window.
Data export and deletion are available on every plan, including Free.
Does Tycoon use my store's data to train AI models?
No. Merchant and shopper data are not used to train AI models without explicit written consent, in line with Shopify's API terms. The AI model providers Tycoon uses process requests for inference only, under no-training terms. Nightly learning uses only your store's results and is never shared with other stores.
Learning in Tycoon means adjusting which offer, recommendation or first question to use in your store, plus new answers you approve. It is not model training. The learning page shows how that works and how to turn it off.
Which subprocessors does Tycoon use?
Tycoon runs on Cloudflare infrastructure. For AI replies it uses the Google Gemini API (paid tier only), the Anthropic Claude API and the OpenAI API, each for inference only with no training on the traffic. Billing runs through Shopify, so Tycoon never receives card data.
| Provider | Role | Data use |
|---|---|---|
| Cloudflare | Hosting, storage, network | Encrypted at rest, TLS in transit |
| Google Gemini API (paid tier) | AI replies | Inference only, no training |
| Anthropic Claude API | AI replies | Inference only, no training |
| OpenAI API | AI replies | Inference only, no training |
| Shopify | Billing | Tycoon receives no card data |
Will shoppers know they are talking to an AI?
Yes. The chat window is labelled "AI assistant", Tycoon says plainly that it is an AI, and it never pretends to be a person. It always offers a person from your team. Merchants cannot turn this off, because honest AI disclosure protects your shoppers and your brand.
For the wider picture on disclosure rules and hand-off design, read AI chatbot disclosure and human hand-off.
Which privacy laws are Tycoon's policies written for?
Our policies are written with GDPR, UK GDPR, CCPA/CPRA, the Israeli Privacy Protection Law (Amendment 13) and the transparency duty in Article 50 of the EU AI Act in mind. We do not claim any certification, such as SOC 2, ISO 27001 or "GDPR certified".
Read the current policy on our privacy page, and check with your own counsel about your store's obligations. Questions go to privacy@tycoonagent.ai.
Frequently asked questions
Can Tycoon see my customers' names or email addresses?
No. Tycoon requests orders access without customer access, filters customer fields out of order webhooks, and never reads or stores names, emails, phone numbers or addresses.
How long are chat transcripts kept?
Until your plan's history period ends: 7 days on Free, 30 on Starter, 90 on Growth and 365 on Tycoon. Then they are deleted automatically.
What happens to my data if I uninstall Tycoon?
Shopify sends the shop/redact compliance webhook and Tycoon deletes all of your shop's data.
Can a shopper delete their own conversation?
Yes. The "Forget this chat" option in the chat window wipes that conversation.
Is Tycoon SOC 2 or GDPR certified?
Tycoon does not claim any certification. Its policies are written with GDPR, UK GDPR, CCPA/CPRA and related laws in mind; check with counsel about your own obligations.
See Tycoon on your own store
Leave your store address and get a private demo in about a minute: your real products and prices, Tycoon asking and recommending like it would for your shoppers. Valid for 7 days.
Keep reading
- CompanyPrivacy noticeHow the demo handles your details.
- ProductHow to add Tycoon to your Shopify store, from install to the first saleTycoon is an AI sales associate for Shopify stores. It learns your store by itself, waits for you to approve what it found, then answers shoppers with live prices and stock, checking every reply before it is sent.
- ProductAn AI that learns your store, and shows you what it learnedTycoon reads your store by itself when you install it. Then, every night, it looks at what worked in your store and tunes itself. You see every change in a weekly feed, approve new answers before they go live, and can undo anything.
- ArticleAI chatbot disclosure and human hand-off: what Shopify stores needTelling shoppers they are talking to an AI is now a legal expectation in some places and a trust expectation almost everywhere. Here is what the rules say, in plain English, and how to design for them.