Personal data processing policy

1. Who processes the data

Anmarto provides search and an AI consultant for online stores. The operator identified at the end of this page processes the data. Questions about data processing are accepted by email and answered within 30 days.

2. Whose data, and what data

We distinguish two groups. This distinction is central to this policy.

2.1. Store owner data — our customer

We process this data as the operator under our agreement with the customer:

• Name, email and phone number — for dashboard access and communication.
• Store website address and catalogue data — to run search.
• Payment transactions: amounts, dates and statuses. We do not see or store bank card details; the payment service receives them.
• Technical records: request addresses, time and browser type — to investigate failures and prevent abuse.

2.2. Store shopper data

We process this data on the store’s instructions: the store remains the data operator, and we are the processor. We receive the data listed below.

We do not combine shopper data from different stores, share it with third parties or use it for advertising. The store must obtain its shoppers’ consent and publish its own policy. We provide the widget, but your relationship with the shopper remains yours.

• Search queries and product clicks — to improve search in that store.
• Conversations with the AI consultant, when the shopper uses it.
• A pseudonymous visitor identifier in the browser — to distinguish visitors within the website.
• Contact details voluntarily left with the consultant — passed to the store and its record-keeping system.

3. Why we process data

We do not sell data, share it with advertising networks or use one store’s shopper conversations to train models for another store.

• To operate the service: search finds products, the consultant answers and the dashboard opens.
• To fulfil the agreement: calculate subscription charges, issue invoices and accept payment.
• To improve search quality using data from that same store.
• To respond to requests and notify you of failures.
• To meet legal requirements, such as retaining payment documents.

4. Who receives data

Only providers needed to operate the service, and only the necessary amount of data:

• The payment service — to accept payment.
• The language model provider — the shopper’s query and fragments of the store catalogue, so the consultant can answer. Conversations are not used to train third-party models.
• The email service — for subscription expiry messages and account recovery.
• Government authorities — where required by law.

5. Where and how long data is stored

Data is stored on servers used to operate the service.

After termination, store data is deleted within 30 days, except where the law requires longer retention.

• Catalogue and settings — for the duration of the agreement.
• Search statistics and consultant conversations — 12 months.
• Technical records — 6 months.
• Payment documents — for the periods required by law.

6. How we protect data

• Connections are encrypted.
• Passwords are stored only as hashes; the original cannot be recovered.
• The dashboard owner and a limited group of staff have access to store data only where needed for their duties.
• Access keys are issued per store and revoked on request.

7. Cookies and visit counters

Our website uses technical cookies required to sign in to the dashboard. Visit counters are enabled only after your consent; refusing does not break the service.

The widget on a store website keeps a pseudonymous identifier and the shopper’s own query history in the browser. The shopper can clear them in the widget.

8. Your rights

You may ask what data we process about you, request correction or deletion, and withdraw consent. Write to the address below; we reply within 30 days. Withdrawing consent to processing required for the service means terminating the agreement.

If you shop at a store using Anmarto, contact that store: it is the operator of your data. We will help it fulfil your request.

9. Changes

New versions are published on this page. We notify customers of material changes by email at least 10 days in advance.