Privacy Policy — Kuwalyst AI Analyst for Shopify

01 — Who are we?

Kuwalyst AI Analyst is provided by Kuwalyst SAS, a société par actions simplifiée (SAS) registered with the Paris Trade and Companies Register under number 995 380 649, with its registered office at 200 rue de la Croix Nivert, 75015 Paris, France.

Kuwalyst AI Analyst is a Shopify application designed to help merchants understand their sales performance, product performance, customer repeat-purchase patterns, and sales forecasts.

For personal data collected directly from merchants in connection with the app, Kuwalyst may act as a data controller.

When Kuwalyst processes Shopify customer and order data on behalf of a merchant, Kuwalyst generally acts as a data processor or service provider to that merchant.

02 — What data do we process?

When a merchant installs and uses Kuwalyst AI Analyst, we process information necessary to provide the app and its analytical features.

Data received from Shopify

Depending on the features used and the permissions granted by the merchant, this may include:

  • Store identifiers and store configuration
  • Orders and order history
  • Order dates and monetary values
  • Line items, products, variants, and quantities
  • Discounts
  • Refunds and returns
  • Inventory and location information
  • Shopify customer identifiers used to recognize repeat purchases by the same customer

For customer analytics, customer identifiers may be used to associate purchases belonging to the same customer and calculate metrics such as repeat purchases, retention, cohorts, and customer segments.

Kuwalyst AI Analyst does not require customer names, customer email addresses, customer phone numbers, customer shipping addresses, or customer billing addresses for these analytics.

Data provided by merchants

We may also process information provided directly by merchants or users of the app, including:

  • Store and account information required to authenticate and operate the app
  • Settings and preferences configured within Kuwalyst
  • Sales targets and other analytical settings
  • Business context voluntarily entered by the merchant
  • An email address provided by the merchant for alerts, reports, or support
  • Technical and operational information required to secure, maintain, and troubleshoot the app

03 — Why do we process this data?

We process data only where necessary to operate, secure, and provide Kuwalyst AI Analyst.

The purposes may include:

  • Analyzing sales and revenue performance
  • Identifying changes and patterns in store performance
  • Analyzing product performance
  • Analyzing repeat purchases, retention, cohorts, and customer behavior
  • Generating sales forecasts
  • Producing analytical summaries and explanations
  • Providing alerts or periodic reports when enabled by the merchant
  • Maintaining settings and preferences
  • Operating, monitoring, securing, and troubleshooting the app
  • Responding to support requests
  • Complying with applicable legal and regulatory obligations

Customer identifiers are used to determine whether separate purchases were made by the same customer for analytical purposes.

They are not used by Kuwalyst to contact the merchant's customers.

We do not sell or rent merchant or customer data.

04 — How does Kuwalyst use AI?

Kuwalyst AI Analyst uses automated analytical methods and generative AI to help merchants understand their store performance.

Core metrics and analytical findings are calculated from Shopify data before narrative summaries or explanations may be generated.

Generative AI may then be used to present these findings in a clearer and more useful way.

We aim to minimize the information provided for generative AI processing and do not intentionally provide unnecessary directly identifying customer information such as:

  • Customer names
  • Customer email addresses
  • Customer phone numbers
  • Customer shipping addresses
  • Customer billing addresses

AI-generated summaries, recommendations, and forecasts may contain errors or uncertainty and should be treated as analytical assistance rather than guaranteed predictions or business advice.

05 — Who can access or process the data?

Shopify-derived data and other information processed by Kuwalyst may be accessed only where necessary by:

  • Authorized personnel working on Kuwalyst
  • Hosting and infrastructure providers
  • Service providers used to operate and maintain the application
  • Email or notification providers where the merchant enables those services
  • Other service providers acting on our behalf and subject to appropriate contractual and data protection obligations

Our infrastructure includes services provided by Scaleway.

Access to production data is limited to people and systems that require access for the operation, security, maintenance, or support of the service.

We do not sell personal data to third parties.

06 — Where is data processed?

Our primary application infrastructure is hosted in France.

Some service providers used to operate the application may process limited information in other jurisdictions.

Where personal data is transferred outside the European Economic Area, we use appropriate safeguards where required by applicable data protection law.

Shopify separately processes merchant and customer information in accordance with Shopify's own terms and privacy policies.

07 — How long do we keep data?

We retain Shopify-derived data only for as long as necessary to provide Kuwalyst AI Analyst and for the purposes described in this policy.

While the app is installed, we may retain store data, analytical results, settings, and related operational information required to provide the service.

When a merchant uninstalls Kuwalyst AI Analyst, we stop processing Shopify data for the purpose of providing the app and process applicable deletion requests received through Shopify's privacy mechanisms.

Associated Shopify-derived application data will be deleted in accordance with applicable requirements, except where limited information must be retained to comply with legal obligations or to address legitimate contractual, security, fraud-prevention, or dispute-resolution requirements.

Certain technical or operational records may be retained for a limited period before being deleted.

We do not intentionally retain personal data longer than necessary for the purposes for which it was collected.

08 — Privacy requests and Shopify data

Kuwalyst supports Shopify's mandatory privacy mechanisms.

These mechanisms may include requests relating to:

  • Access to customer data processed by the app
  • Deletion of customer data
  • Deletion of shop data following app uninstallation

Where applicable, Kuwalyst will respond to valid privacy requests in accordance with applicable data protection law and Shopify's requirements.

If you are a customer of a merchant using Kuwalyst AI Analyst, you should normally contact the merchant from whom you made your purchase regarding your personal data.

Where required, Kuwalyst will assist merchants in responding to valid privacy requests relating to data processed through the app.

09 — Your rights and how to contact us

Depending on applicable law, individuals may have rights concerning their personal data, including rights of:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection to certain processing

For questions about Kuwalyst AI Analyst, support requests, or questions regarding how data is processed through the app, please contact:

You may also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr, or another competent data protection authority.

10 — Changes to this policy

This privacy policy applies specifically to Kuwalyst AI Analyst for Shopify.

We may update this policy from time to time to reflect changes to:

  • Kuwalyst AI Analyst
  • Our data processing practices
  • Our service providers
  • Applicable laws and regulations
  • Shopify platform or App Store requirements

Any material changes will be published on this page.

Last updated: September 2026