Privacy Policy

1. Data Controller

Paideia Europa ("Paideia", "we") is the data controller for personal data collected through the Paideia Agents platform and its integrations (Shopify, web widget, email).

Contact: privacy@paideur.com

2. Data We Collect

• Store data: name, domain, language, timezone, store owner email. Obtained during the app installation process.
• Product data: title, description, prices, variants, images. Synchronized from the customer's e-commerce platform.
• Conversation data: messages exchanged between store visitors and the support agent. May include name, email, and phone number if voluntarily provided by the visitor.
• Order data: order number and total, linked to conversations to measure conversions. We do not store payment data.

3. Purpose of Processing

• Provide the automated support agent service.
• Synchronize the product catalog to answer visitor queries.
• Measure agent performance (conversions, escalations, ratings).
• Improve the quality of agent responses.

4. Legal Basis

Processing is based on the performance of the service contract between Paideia and the customer (store owner), and on the legitimate interest of improving the store's customer service.

5. Data Sharing

Data is processed through artificial intelligence providers (Anthropic, OpenAI) to generate agent responses. These providers act as data processors and do not retain conversation data.

We do not sell, share, or transfer personal data to third parties for commercial purposes.

6. Data Retention

• Store data: while the app is installed, plus 90 days after uninstallation.
• Conversation data: according to the retention policy configured by the customer. By default, indefinitely while the service is active.
• Product data: while the app is installed. Deleted upon uninstallation.

7. Data Subject Rights

Store visitors and store owners may exercise their rights of access, rectification, erasure, portability, restriction, and objection to processing by contacting privacy@paideur.com.

We respond to all requests within a maximum of 30 days.

8. Security

• Complete data isolation between customers (multi-tenant).
• Credentials and tokens stored encrypted at rest.
• Communications exclusively via HTTPS.
• Cryptographic verification (HMAC) on all integrations.

9. Cookies

Paideia uses strictly necessary session cookies for the administration panel. We do not use tracking or advertising cookies.

10. Changes to This Policy

We reserve the right to update this policy. We will notify significant changes by email to active customers.