Privacy Policy

Last updated: August 5, 2026

Milly Software ("we", "us", or "our") operates Milly Chat, an AI-powered shopping assistant for e-commerce stores. This Privacy Policy explains how we collect, use, and protect information when you use our service.

1. Information We Collect

1.1 Store Owner Information

When you install Milly Chat, we collect:

  • Store name and domain
  • Contact email address
  • Shopify store identifier
  • Product catalog data (titles, descriptions, prices, images)

1.2 Customer Interaction Data

When customers interact with the Milly Chat widget on your store, we collect:

  • Chat messages and queries
  • Products viewed and clicked
  • Anonymous visitor identifiers (stored in browser localStorage)
  • Widget interaction events (opened, closed)
  • Page URLs where interactions occur

1.3 Order Attribution Data

For conversion tracking, we may receive limited order information including:

  • Order ID and total amount
  • Associated visitor identifier (if available)
  • Whether the widget was shown during the session

We do not store the customer's email address, name, shipping address, or payment details from orders. Attribution is matched on the anonymous visitor identifier and the order total, never on customer identity.

Separately, when a shopper chooses to provide their details in chat — for example to ask a question or request support — we store the email address, name, and message they supply so that request can be delivered to the store owner or their support tools. Back-in-stock requests are forwarded directly to the store's own notification provider and are not stored by us.

2. How We Use Information

We use collected information to:

  • Provide AI-powered product recommendations
  • Improve response accuracy and relevance
  • Generate analytics and performance reports for store owners
  • Measure widget effectiveness and conversion attribution
  • Debug issues and improve our service

3. Data Sharing

We do not sell personal information. We may share data with:

  • AI Service Providers: Chat messages are sent to Anthropic to generate responses. OpenAI is used separately to generate search embeddings and to classify query intent. Each provider's handling of that data is governed by its own API terms.
  • Infrastructure Providers: We use Vercel for hosting and Supabase for database services.
  • Store Owners: Store owners can view anonymized analytics about widget usage on their store.

4. Data Retention

  • Chat conversations: Retained for 90 days, then automatically deleted.
  • Analytics data: Aggregated statistics retained indefinitely; raw event data retained for 1 year.
  • Product data: Synced regularly and updated with each sync; removed when store is deleted.

5. Cookies and Local Storage

The Milly Chat widget uses browser localStorage to store:

  • Visitor ID: A randomly generated identifier to track widget interactions across sessions.
  • Widget state: Whether the widget was shown to enable A/B testing.

This data is stored locally in the customer's browser and is not transmitted unless they interact with the widget or complete a purchase.

6. Security

We implement industry-standard security measures including:

  • TLS encryption for all data in transit
  • Encrypted database storage
  • Webhook signature verification for Shopify integrations
  • Access controls and authentication for store dashboards

7. Your Rights

Store owners can:

  • Access their analytics data through the dashboard
  • Export conversation data upon request
  • Delete their store and all associated data
  • Uninstall the app at any time

End customers can clear their localStorage to remove the visitor identifier, or contact the store owner to request data deletion.

8. GDPR and CCPA

We support compliance with GDPR and CCPA. As a data processor, we process customer data on behalf of store owners (data controllers). Store owners are responsible for obtaining appropriate consent from their customers and including Milly Chat in their privacy disclosures.

9. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify store owners of significant changes via email or dashboard notification.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]

Website: millysoftware.com