1. Introduction
Extuitive ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered e-commerce analysis platform.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact information (email address, phone number)
- Company information and job title
- Account credentials and authentication data
- Billing and payment information
- Communication preferences
2.2 Business Data
When you use our services, we may collect:
- E-commerce store URLs and public store information
- Product data and inventory information (when you connect your store)
- Sales data and analytics (with your permission)
- Market research queries and analysis requests
- Chat conversations and AI interaction history
2.3 Technical Information
- IP address and device information
- Browser type and version
- Usage patterns and feature interactions
- Log files and system performance data
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the collected information to:
- Provide and improve our AI-powered analysis services
- Generate personalized product recommendations and market insights
- Process payments and manage subscriptions
- Communicate with you about our services
- Provide customer support and technical assistance
- Analyze service usage to improve performance and features
- Comply with legal obligations and prevent fraud
- Train and improve our AI models (using aggregated, anonymized data)
4. AI and Machine Learning
Our service uses artificial intelligence and machine learning technologies. We want to be transparent about how this affects your data:
- AI models analyze your business data to provide personalized insights
- We use aggregated, anonymized data to improve our AI models
- Individual business data is not shared with other users
- AI-generated insights are created specifically for your account
- We implement safeguards to prevent AI bias and ensure fair analysis
5. Information Sharing and Disclosure
We do not sell your personal information. We may share information in these circumstances:
5.1 Service Providers
We may share data with trusted third-party service providers who help us operate our platform, including cloud hosting, payment processing, and customer support services.
5.2 Third-Party Integrations
When you connect third-party services, we access only the data necessary to provide our services, subject to your permissions and their privacy policies.
Shopify Integration
When you connect your Shopify store, we collect:
- Store URL and basic store information
- Product catalog data (names, descriptions, prices, images)
- Inventory levels and product variants
- Store analytics (with your permission)
Meta (Facebook/Instagram) Integration
When you connect your Meta Business account, we collect and store:
- Your Meta account ID and name
- Access tokens (stored encrypted and refreshed according to Meta's policies)
- Ad account information (ID, name, status, currency, timezone)
- Facebook Pages you manage (ID, name, category, profile picture)
- Granted permissions for advertising management
- Campaign, ad set, and ad performance data
This Meta data is used solely to:
- Create and manage advertising campaigns on your behalf
- Display your ad account information and performance metrics
- Access your Facebook Pages for ad creative creation
- Provide AI-powered recommendations for ad optimization
Meta integration data is stored securely with encryption and row-level security. Access tokens are automatically refreshed before expiration. All Meta-related data is immediately and permanently deleted when you disconnect the integration using the "Disconnect" button in your Integrations settings.
Instagram Profile Connection
When you connect your Instagram profile, we store:
- Your Instagram username
- Public profile picture URL
This is used to link your brand identity with your e-commerce presence.
5.3 Legal Requirements
We may disclose information if required by law, legal process, or to protect our rights, users, or the public from harm.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.
6. Data Security
We implement comprehensive security measures to protect your information:
- End-to-end encryption for data transmission
- Secure cloud storage with access controls
- Regular security audits and vulnerability assessments
- Employee training on data protection best practices
- Multi-factor authentication for account access
- Regular data backups and disaster recovery procedures
7. Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations:
- Account information: Retained while your account is active
- Business data: Retained to provide ongoing analysis and insights
- Chat history: Retained to improve AI responses and provide context
- Technical logs: Typically retained for 90 days for security purposes
- Billing records: Retained as required by law and accounting practices
8. Your Rights and Choices
You have the following rights regarding your personal information:
8.1 Access and Portability
- Request a copy of your personal information
- Export your business data in common formats
- View your AI interaction history
8.2 Correction and Updates
- Update your profile and account information
- Correct inaccurate personal data
- Modify your communication preferences
8.3 Deletion and Restriction
- Delete your account and associated data
- Request deletion of specific information
- Restrict processing of your data
- For Meta integration data: Use the "Disconnect" button in Integrations settings for immediate deletion
- For all data deletion requests: Contact privacy@extuitive.com or use in-app deletion tools
8.4 Opt-Out Options
- Unsubscribe from marketing communications
- Disable non-essential cookies
- Opt out of data analysis for AI model improvement
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences and settings
- Analyze website usage and performance
- Provide personalized content and recommendations
You can control cookies through your browser settings, but disabling certain cookies may affect the functionality of our service.
10. International Data Transfers
Your information may be processed and stored in countries other than your own. We ensure adequate protection through appropriate safeguards, including standard contractual clauses and adequacy decisions.
11. Children's Privacy
Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.
12. Regional Privacy Rights
12.1 European Users (GDPR)
If you are in the European Economic Area, you have additional rights under GDPR, including:
- Right to object to processing
- Right to data portability
- Right to lodge a complaint with supervisory authorities
12.2 California Users (CCPA)
California residents have rights under the California Consumer Privacy Act, including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising privacy rights
13. Third-Party Links
Our service may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through our service. Your continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
- Email: privacy@extuitive.com
- Data Protection Officer: dpo@extuitive.com
- Address: 55 Cambridge Pkwy, Cambridge, MA 02142
16. Data Processing Lawful Basis
We process your personal information based on:
- Contract performance (to provide our services)
- Legitimate interests (to improve our services and prevent fraud)
- Legal compliance (to meet regulatory requirements)
- Consent (for marketing communications and optional features)
This Privacy Policy is designed to help you understand how we protect your information while providing innovative AI-powered e-commerce analysis services.