Privacy Policy

1) Scope and Roles

This Policy covers information we collect about website visitors, account holders, and merchants who connect their stores. For Store Data we process on behalf of a Merchant, Bustly generally acts as a processor/service provider; for our own website, account, billing, support, and marketing data, Bustly acts as a controller/business.

2) Information We Collect

a) You provide

• Account & profile: name, email, password, role, organization, time zone.
• Billing: payment method details (processed by our payment processor), billing address, tax IDs.
• Store configuration: guardrails, rules, approvals, whitelists, experiments, and preferences.
• Content: prompts, uploaded assets, copy, images, and other Customer Content.

b) From your Store and integrations

• Store Data: products, variants, images, prices, costs, inventory, orders, refunds, discounts, carts, traffic and conversion metrics, search terms, campaigns, ROAS/CPA where available, and related identifiers.
• Connected apps: information from integrated Third‑Party Services (e.g., analytics, email, ad platforms) as authorized by you. You can disconnect integrations at any time.

c) Collected automatically

• Usage & device: log data, IP address, browser type, device identifiers, pages viewed, referring/exit pages, timestamps, language, crash reports.
• Cookies & similar: see "Cookies" below.
• Task and conversation records: instructions, prompts, conversation history, AI-generated responses, tool inputs and results, and records of actions, approvals, errors and other execution activity. These records may contain Customer Content, Store Data and personal information.

3) How We Use Information (Purposes)

We use information to:

• Provide and operate the Service, including generating proposals/Outputs and enabling actions within Guardrails;
• Maintain security, monitor abuse, fraud, and service performance;
• Improve the Service, including analytics, testing, research, and feature development;
• Communicate with you about updates, support, and educational or marketing messages (you can opt out of non‑essential marketing);
• Comply with legal obligations and enforce our Terms.

Model training. Customer Content and Store Data are not used by Bustly for training third-party foundation models, except where you authorize that use in a separate signed agreement. We may use aggregated or de-identified information for service improvement and analytics only where it cannot reasonably identify you or your customers. Processing AI requests, retaining operational records and conducting security reviews are distinct from model training; retention is described in Section 7.

4) Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, our processing bases include performance of a contract for the Service; legitimate interests in security, abuse prevention and service administration; consent, where applicable, for optional website analytics and advertising; and legal obligations. The public website enables ordinary, non-advertising analytics by default in all regions, subject to your saved choices and browser privacy signal, as described in Section 9. Advertising requires separate choices. You may reject or withdraw optional processing without losing access to the website.

5) Sharing of Information

We may share information with:

• Service providers and subprocessors that support hosting, storage, payments, communications, diagnostics, customer support, AI request routing and model inference, subject to applicable contractual and data protection requirements;
• Third‑Party Services you choose to connect, under your direction;
• Affiliates for support and operations consistent with this Policy;
• Legal/regulatory authorities where required;
• Business transfers (e.g., merger, acquisition, asset sale), subject to this Policy.

Cloud and AI providers. We use Amazon Web Services (AWS) and Google Cloud for cloud services. We also use OpenRouter, Inc. to route AI requests to selected inference providers. Depending on the task, these requests may include prompts, conversation context, uploaded content, relevant Store Data and tool results. OpenRouter and the selected inference providers process the information needed to generate and return responses.

The inference provider may vary with the model, feature, routing configuration and service availability, and may differ from the model developer. These providers support Bustly's operation of the Service and are separate from integrations you independently choose to connect. For information about the providers and processing terms relevant to your use, contact support@bustly.shop.

Google Analytics is linked to Google Ads accounts. If you separately enable advertising choices, eligible website activity and audiences may be shared with Google for advertising measurement and personalization. This may constitute sharing for cross-context behavioral advertising under applicable law. Advertising choices are off by default. You can opt out through Cookie settings; we also honor Global Privacy Control for advertising on this website.

6) International Data Transfers

Our production AI gateway is hosted on AWS in the United States. Requests routed through OpenRouter may also be processed by OpenRouter and the selected inference providers in other locations. Information may therefore be processed outside your country, where privacy laws may differ. The gateway's location does not determine the location of every processing step. International transfers remain subject to applicable data protection requirements. Contact support@bustly.shop for information about relevant processing locations and transfer safeguards.

7) Data Retention

Retention depends on the type of information and the purpose for which it is processed. Bustly stores conversation and task records to support service features, including history, operation and troubleshooting. We retain other records as needed for security, billing, legal obligations and dispute resolution. AI routing and inference providers may apply separate retention periods under their applicable terms and processing agreements, including for operational records, caching or security purposes. A restriction on model training does not mean that no information is retained. We delete or de-identify information when the applicable purposes and retention requirements end. To request access, export or deletion, contact support@bustly.shop.

The website consent record expires after 180 days. Google Analytics is currently configured to retain event-level data for 2 months and user-level data for 14 months, with the user retention period reset on new activity. These settings do not determine the retention of aggregated standard reports. Rejecting analytics stops future website collection; it does not itself delete data already held by a provider. Contact us to exercise applicable deletion rights.

8) Your Choices and Rights

• Access, correction, deletion, portability, restriction, objection (EEA/UK/other regions where applicable).
• California (CPRA): where applicable, rights to know, delete, correct, limit use of sensitive personal information, and opt out of sale or sharing, including cross-context behavioral advertising. Deny advertising in Cookie settings. You can also enable Global Privacy Control in a compatible browser or contact us. You may designate an authorized agent.
• Marketing: opt out of non‑essential marketing emails via the unsubscribe link; you will still receive essential service emails (e.g., security, billing, "Pulse" operational updates).
• Cookies: manage preferences via Cookie settings or browser settings (see below).

To exercise rights, email support@bustly.shop. We may verify your identity and respond within the timeframe required by law.

9) Cookies and Similar Technologies

We use:

• Essential cookies for login, security, and preferences;
• Analytics cookies to understand usage and improve the Service;
• Functional cookies to remember settings and improve experience.

On the public marketing website, essential storage remembers language and privacy choices. Basic, non-advertising analytics starts by default in all regions. A saved rejection takes priority over this default. Advertising permissions are off by default everywhere. You can still use the website and sign in, start a trial or access your account if you reject optional processing.

The initial analytics setting is the same in every country. This website does not request a country code to decide whether to load analytics.

Google Analytics 4 measures page visits and clicks to sign in, start a trial or access an existing account to help us understand website use. It loads only when permitted by your choice or the global default analytics setting described in this section. Accept analytics enables Google Analytics and keeps advertising permissions off. Settings lets you choose analytics and the three advertising permissions separately. You can opt out of default analytics at any time through Reject all or Cookie settings.

Google Analytics may use first-party cookies such as _ga and _ga_*. Analytics information can include visited URLs, referring pages, browser and device information, language, timestamps and interactions. Advertising storage, advertising data sent to Google and personalized advertising require their respective choices; Google Signals is disabled by this website.

Use Cookie settings in the footer at any time to withdraw or change consent. Rejecting analytics stops both providers and discards unsent account-entry events. If a provider has already loaded, the page refreshes to unload it, or continues an account-entry navigation already in progress. Requests already sent cannot be recalled; withdrawal does not automatically delete previously collected data. You can request deletion using the contact details in Section 8.

Global Privacy Control blocks default analytics in all regions and is treated as an advertising opt-out in this browser, including when an older saved choice allowed advertising. While the signal is enabled, advertising controls remain off. You can still explicitly choose analytics separately. These website controls do not change settings on other devices, browsers or the signed-in application.

Your choice, its timestamp, expiry and notice version are stored locally for up to 180 days. Choices synchronize between open tabs on the same website. When this notice changes, an older permission requires a new choice before the affected processing can start; the global default analytics setting does not bypass this requirement. An existing rejection is retained until its original expiry. On the formal website, rejection also removes Google measurement cookies accessible to that website. Test and preview sites do not remove formal-site cookies.

If browser storage is unavailable, your choice may last only for the current page and may be requested again on navigation. A temporary refusal may be stored in session storage to prevent an older permission from returning after a failed save. Browser settings can also delete or block cookies and local storage. Essential account and security storage is not removed by these marketing website controls.

10) Security

We use reasonable technical and organizational measures (e.g., encryption in transit, access controls, audit logging). No method of transmission or storage is 100% secure; you use the Service at your own risk. Report security issues to support@bustly.shop.

11) Children

The Service is not directed to children under 18 (or as defined by local law). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact support@bustly.shop for deletion.

12) Third-Party Links

Our Service may link to Third-Party Services. Their privacy practices are governed by their own policies.

13) Data Controller; Contact; DPA

For website, account, billing, and marketing data, the data controller is Bustly, Inc., a Delaware corporation. For Store Data we process on your behalf, Bustly acts as a processor/service provider. For a Data Processing Addendum, email support@bustly.shop.

Contact: support@bustly.shop

14) Changes to this Policy

We may update this Policy and notify you of material changes. The "Last updated" date identifies this notice. Continued use of the Service is not consent to optional analytics or advertising. If a change requires new consent, we will ask before enabling the new processing. Website consent records include the notice version; an older permission is not automatically reused for a new notice.

Regional Addenda

A. EEA/UK Addendum

• Controller contact: support@bustly.shop
• Legal bases: See Section 4.
• Transfers: See Section 6 for information about international processing and requests for applicable safeguards.
• Complaints: You have the right to complain to your local supervisory authority.

B. California Addendum (CPRA)

• Categories collected: Identifiers; commercial information; internet/electronic activity; inferences; professional information.
• Business purposes: As described in Section 3.
• "Sale"/"Share": Google advertising uses described in Section 5 may constitute sharing under CPRA. Where applicable, you have the right to opt out of sale or sharing. Deny advertising in Cookie settings or enable Global Privacy Control for this browser; contact us for other privacy requests.
• Sensitive information: Processed only for permitted purposes or with consent.
• Rights & requests: Section 8; email support@bustly.shop.