Privacy Policy

1. Scope and contact

This Policy explains how Shopao processes personal data when you visit shopao.io, create an account, connect Mercado Libre, use the AI agent, purchase a subscription, or contact support. Questions and privacy requests may be sent to info@shopao.io. PayPal separately processes payment and transaction information under its own privacy statement.

2. Information we process

• Account information, such as name, email, company, language, and account settings.
• Mercado Libre OAuth tokens, account and store identifiers, listings, catalog information, and resources covered by the permissions you grant.
• Buyer questions and messages, related metadata, generated responses, instructions, store rules, and approval or sending history.
• Technical and usage information, including IP address, browser, device, timestamps, actions, diagnostics, and security logs.
• Support communications, feedback, and information you voluntarily provide.
• PayPal metadata, such as payer, transaction and subscription identifiers, plan, amount, currency, and billing status.

3. Sources

We receive information directly from you, from your use of Shopao, from Mercado Libre under the OAuth permissions you grant, from PayPal for payments and subscriptions, and from infrastructure or security providers when needed to operate or investigate the Service.

4. How and why we use data

• Create accounts, authenticate users, and provide requested features.
• Connect Mercado Libre and process questions, messages, listings, and store context under your instructions.
• Generate, personalize, review, and send responses for your connected store.
• Manage plans, access, purchases, renewals, cancellations, and support.
• Protect Shopao, prevent abuse or fraud, maintain logs, and diagnose errors.
• Comply with legal obligations and enforce our Terms.

Depending on applicable law, these activities rely on performing our agreement with you, legitimate interests in operating and protecting the Service, consent where required, or legal obligations.

5. Mercado Libre buyer data

The connected seller determines why and how buyer information is used. Shopao processes that information under the seller's instructions to provide the Service. Sellers must have an appropriate legal basis, comply with Mercado Libre policies, provide required notices, and avoid unlawful instructions. If a buyer exercises a privacy right concerning information controlled by a seller, we may refer the request to that seller.

6. Artificial intelligence and store isolation

Shopao sends AI providers only the information needed to generate or evaluate responses. Customer information, buyer questions, messages, and store context are used only to provide and improve responses for the individual connected store. They are not used to train general-purpose or shared models and are not used to improve responses for other stores.

Shopao does not sell personal data or store data.

7. Payments and PayPal

PayPal processes payments for subscriptions purchased using that method under its own terms and privacy notice. Shopao receives only the payer, transaction, and subscription metadata required to provision, administer, and support access; Shopao does not receive or store full card numbers or CVCs.

8. Service providers and international processing

We disclose only the information necessary to Mercado Libre, PayPal, and providers that supply hosting, databases, artificial intelligence, email, monitoring, analytics, security, and support. They process information under contractual and security obligations. Because these services operate internationally, information may be processed outside your country; where required, we use legally recognized safeguards. You may request current provider information at info@shopao.io.

9. Retention

We retain account, configuration, question, message, response, support, transaction, and security information only for as long as reasonably necessary to provide the Service, comply with law, prevent fraud, resolve disputes, and maintain backups. OAuth tokens are removed or invalidated after disconnection or revocation, subject to technical processing time. Deletion requests may be limited where retention is legally required or necessary for security or legal claims.

10. Security

We use reasonable technical and organizational safeguards, including encrypted connections, protection of OAuth credentials and tokens, access controls, logging, and backups. Your Mercado Libre password does not pass through Shopao. No system is completely secure; we investigate incidents and provide notifications when applicable law requires them.

11. Your privacy rights

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may complain to a competent authority. Send requests to info@shopao.io. We may verify identity and apply lawful exceptions.

12. Cookies and analytics

Shopao uses essential technologies needed to operate the website and may use Google Analytics to understand aggregate website usage when enabled. Browser settings and available consent controls can be used to manage non-essential cookies. We do not use analytics data to train AI models.

13. Children

Shopao is intended for people with legal capacity to manage or act for a seller account and is not directed to children. Contact us if you believe a child provided personal information without valid authorization.

14. Changes and contact

We may update this Policy as the Service, providers, or legal requirements change. We will publish the new date and provide additional notice when required. For privacy questions or requests, contact info@shopao.io.