Privacy Policy

1. Introduction

This Privacy Policy describes how Niti Inc. ("Niti," "we," "us," or "our") collects, uses, and discloses your information in connection with your use of our Shopify application (the "App") and related services.

We are committed to protecting the privacy of our users, which include Shopify merchants who install our App ("Merchants") and their customers whose data is processed through our service ("End Customers"). This policy outlines our practices concerning the collection, use, and protection of personal data.

By installing our App or using its features, you agree to the terms of this Privacy Policy. Niti is incorporated in Delaware, United States, with offices at 1041 Ellis Avenue, San Jose, CA 95125.

2. Information We Collect

We collect information necessary to provide and improve our retention marketing services. This includes:

2.1 Information from Merchants

When you install the App, we automatically access certain information from your Shopify account through OAuth authorization, including:

• Store name and domain
• Merchant name and email address
• Contact information (phone number, business address)
• Store settings and configuration data

We use this information to provide our service, for billing purposes, customer support, and service improvements.

2.2 Information from End Customers (Processed on Behalf of Merchants)

To provide retention marketing services to Merchants, we process the following End Customer data:

Customer Data:

• Name and contact information (email, phone number, mailing address)
• Customer account information and unique identifiers
• Purchase history and order details (products, order value, dates, frequency)
• Browsing behavior and session data on the Merchant's store
• Product views, cart additions, and cart abandonment events
• Customer acquisition source (e.g., Google Ads, Meta, organic search)
• Geographic location (city, state, country, postal code)
• Device and browser information

Transaction Data:

• Order history and purchase patterns
• Product preferences and categories
• Pricing and discount information
• Order values and contribution margins

Behavioral Data:

• Website session data and browsing patterns
• Email engagement metrics (opens, clicks)
• Campaign response data
• Customer lifecycle stage and segment classifications

2.3 Analytics and Usage Data

We collect anonymized and aggregated data about:

• App usage and feature adoption
• Campaign performance metrics
• Conversion rates and revenue attribution
• System performance and error logs

3. How We Use Your Information

3.1 To Provide Retention Marketing Services

We process End Customer data exclusively to provide the following services to Merchants:

AI-Powered Analysis:

• Monitor customer behavior and purchase patterns across 100+ metrics
• Detect retention opportunities in real-time (e.g., cart abandonment spikes, segment disengagement)
• Generate automated root cause analysis for behavioral changes

Intelligent Segmentation:

• Create fine-grained customer segments based on acquisition channels, purchase history, margin profiles, and campaign performance
• Build precision audiences (e.g., "Instagram first-time abandoners," "high-value 3+ order customers")
• Analyze customer cohorts and lifecycle stages

Strategy Generation:

• Generate automated, multi-campaign marketing strategies
• Recommend optimal channels (email, SMS, WhatsApp, push notifications)
• Provide copy direction and timing recommendations

Offer Optimization:

• Calculate optimal discount levels by customer segment
• Protect margins through intelligent offer testing
• Recommend non-discount incentives (early access, free shipping) for high-value segments

Audience Export:

• Enable Merchants to export customer segments to Shopify customer lists
• Facilitate integration with email service providers (ESPs) and advertising platforms
• Provide audience synchronization capabilities

Performance Tracking:

• Track campaign performance and attribution
• Measure conversion rates, revenue impact, and margin protection
• Provide continuous learning and optimization insights

3.2 To Improve and Maintain the App

We use aggregated and anonymized data to:

• Monitor system performance and uptime
• Diagnose technical issues and bugs
• Improve user experience and feature functionality
• Conduct product analytics and research

3.3 For Communication and Support

We use Merchant contact information to:

• Provide customer support and technical assistance
• Communicate service updates and new features
• Send billing notifications and invoices
• Share best practices and educational content

4. AI Model Training Commitment

All data processed by our AI service providers (including OpenAI, Anthropic, Google, and others) is used solely to generate insights, strategies, and recommendations for the specific Merchant. We have contractual agreements with all AI providers prohibiting the use of customer data for model training purposes.

5. Data Sharing and Third-Party Services

We do not sell, rent, or trade personal information. We may share information with trusted third-party service providers solely for the purpose of operating our App and providing our services:

5.1 Infrastructure and Hosting

Google Cloud Platform & Amazon Web Services (AWS):

• Our backend infrastructure and databases are hosted across Google Cloud and AWS
• Data is stored in servers located in the United States and India
• All data is encrypted at rest and in transit using industry-standard protocols

5.2 E-commerce Platform

Shopify:

• Our App is built on the Shopify platform
• We process data in accordance with Shopify's API Terms of Service
• OAuth authorization is used for secure data access

5.3 AI Service Providers

Multiple AI Providers (including OpenAI, Anthropic, Google AI, and others):

• We use various AI services to power our opportunity detection, segmentation, and strategy generation features
• Customer data sent to these providers is processed under strict data processing agreements
• No data is retained by AI providers or used for training purposes

5.4 Payment Processing

Shopify Billing API & Third-Party Payment Processors:

• We currently process payments through Shopify's Billing API
• We may use additional payment processors in the future
• We do not store credit card information or payment credentials
• All payment data is handled in compliance with PCI-DSS standards

5.5 Integration Partners

With Merchant authorization, we may integrate with:

• Email service providers (ESPs) for campaign execution
• Advertising platforms (Google Ads, Meta Ads) for audience synchronization
• SMS and messaging platforms for multi-channel campaigns
• Analytics platforms for enhanced tracking

All third-party service providers are carefully vetted and bound by data processing agreements that meet or exceed industry standards for security and privacy.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256
• Certifications: We are ISO 27001 and SOC 2 Type II certified
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Annual security audits and penetration testing
• Monitoring: 24/7 security monitoring and incident response procedures

7. Data Retention and Deletion

We retain your information for as long as necessary to provide services to merchants. When a merchant uninstalls our app or stops using our services, we will:

• Stop processing new data within 24 hours
• Delete all customer data within 12 months (or sooner if requested)
• Retain only anonymized, aggregated analytics data that cannot identify individuals

You can request deletion of your data at any time by emailing privacy@niti.ai.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU transfers
• Adequacy decisions where applicable
• Compliance with applicable data protection laws

9. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing

To exercise these rights, email us at privacy@niti.ai. We will respond within 30 days.

10. Regional Privacy Rights

European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information (note: we do not sell personal information).

Other Regions

We comply with applicable privacy laws in all jurisdictions where we operate. Contact us for information about your specific rights.

11. Merchant Responsibilities

Merchants who use Niti are responsible for:

• Obtaining necessary consents from customers before sharing data with us
• Providing accurate privacy notices that disclose their use of Niti
• Complying with applicable privacy laws in their jurisdiction
• Responding to customer privacy requests related to data processed by Niti

12. Children's Privacy

Our services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Effective Date" at the top of this policy
• Sending an email notification for significant changes

Your continued use of merchants' services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: