Privacy & Cookie Policy

Sabato LTD, the company behind Sabato AI ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal data when you use our Shopify Application, website, and Voice AI platform (collectively, the "Services").

Who We Are

Data Controller: Sabato LTD, 71-75 Shelton Street, Covent Garden, London, United Kingdom.

Company No.: 17294448

Contact: privacy@sabato.ai

What Data We Collect

We collect the following categories of data to provide our Voice AI and Catalog Search services:

• Account Data: Name, email address, shop URL (myshopify.com domain), billing details, and other account-related information necessary to manage your subscription.
• Shopify Store Data: To function as a connector, we sync and cache public-facing store data, including products (titles, descriptions, tags, variants and images), inventory (stock levels and location availability, so we can answer "is this in stock?" queries) and collections (category structures).
• Voice & Interaction Data: Voice recordings, transcripts, and search queries generated when End Users interact with the Sabato AI voice agent.
• Usage Data: IP address, device information, browser type, timestamps, and activity logs within the dashboard.
• Website Data: Pages viewed, referring source and approximate location on sabato.ai, collected through analytics cookies as described in the Cookie Policy below.
• Communication Data: Emails, support requests, and messages exchanged with us.

We do not intentionally collect sensitive personal data (e.g., health, biometric, or political data) unless voluntarily provided in a voice query, which we advise against.

How We Use Your Data

• To synchronize your product catalog and provide accurate AI search results.
• To provide, maintain, and support the Sabato AI Voice Agent.
• To manage your account and process payments.
• To detect and prevent fraud or abuse.
• To analyze usage trends to improve search relevance.
• AI Training: To train and refine our non-personal AI models (e.g., improving speech-to-text accuracy for product names). Personal data is anonymized before being used for training where possible.
• To comply with legal obligations (GDPR, tax laws).

Legal Bases for Processing (GDPR)

• Performance of a Contract: Processing Shopify Data to deliver the Voice Search service.
• Legitimate Interests: Improving AI accuracy, security, and analytics.
• Consent: For marketing communications and for analytics cookies on this website.
• Legal Obligation: Compliance with Shopify's mandatory webhooks and tax laws.

Shopify Data & GDPR Compliance

Sabato AI acts as a Data Processor for the merchant's data. We strictly adhere to Shopify's API License and Terms regarding data privacy.

Mandatory Webhooks: We listen to and process the following Shopify GDPR webhooks within the required timeframes:

• customers/data_request: We provide all data associated with a specific customer upon request.
• customers/redact: We delete all personal data associated with a specific customer (End Buyer) when they request deletion from the merchant.
• shop/redact: If you uninstall the Sabato AI app, we delete your Store Data and Account Data from our active databases within 30 days, retaining only what is legally required for tax and audit purposes.

Data Sharing

We do not sell your personal data. We share data only as follows:

• Subprocessors: Cloud hosting (AWS), database providers, and AI inference providers (e.g., OpenAI/Anthropic), strictly under Data Processing Agreements (DPAs).
• Professional Advisors: Legal and accounting firms.
• Legal Authorities: If required by law.

Data Retention

• Store Data: Retained as long as the App is installed. Deleted upon uninstallation (via shop/redact).
• Voice/Interaction Logs: Retained for a limited period to improve query accuracy, then anonymized or deleted.
• Account Data: Retained as long as you have an active account, plus the period required by United Kingdom tax law.

International Data Transfers

Data may be processed outside of the EU/EEA and the United Kingdom (e.g., servers in the US). We ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

Your Rights

Under GDPR, you have the right to:

• Access, rectify, or erase your data.
• Restrict or object to processing.
• Portability: Request a copy of your data.
• Withdraw consent: At any time.

To exercise these rights, contact privacy@sabato.ai. You also have the right to lodge a complaint with your national supervisory authority — in Italy, the Garante per la protezione dei dati personali; in the United Kingdom, the Information Commissioner's Office (ICO).

Cookie Policy

This Cookie Policy explains how Sabato AI uses cookies on this website (sabato.ai) and in our embedded Shopify App.

What Are Cookies?

Cookies are small text files stored on your device to help us recognize your browser and remember your preferences.

Cookies on this website

This website uses Google Analytics 4 to understand which pages are read and how visitors arrive. It sets cookies in the `_ga` family, which contain a randomly generated identifier and expire after up to two years. We use this only in aggregate, to decide what to write and what to fix. We do not use it for advertising and we do not sell it.

We are currently rolling out a consent banner so that these analytics cookies are only set once you accept them. Until that banner is live, you can prevent them entirely through your browser settings or by using Google's official opt-out browser add-on. Blocking analytics cookies does not affect any part of this website.

This website sets no advertising cookies and no third-party tracking pixels.

Cookies in the Shopify app

• Strictly Necessary: Required for the app to load inside Shopify (e.g., authentication tokens, session IDs). Without these, the app cannot function.
• Functional: Stores preferences (e.g., language, dashboard layout).
• Analytics: Helps us understand how merchants use the dashboard.

Third-Party Cookies

We may use trusted third-party services that set cookies, including Shopify (to maintain your admin session), Stripe (for billing) and analytics providers (to track app performance).

Managing Cookies

You can control cookies through your browser settings. Blocking Strictly Necessary cookies will prevent the Sabato AI app from loading inside the Shopify Admin.

Contact Us

For any question about this policy or about your data, contact privacy@sabato.ai.