XChat Privacy Policy
Last updated: May 9, 2026
Privacy Policy
XChat (“the App”) provides AI-powered customer service chat, automated customer support, product recommendation, and intelligent shopping assistant services (“the Service”) to merchants who use Shopify to power their stores. The App helps merchants respond to customer inquiries by analyzing store content, product catalogs, customer conversations, customer information, and order-related information.
This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
—
Personal Information the App Collects
When you install the App, we are automatically able to access certain types of information from your Shopify account in order to provide the Service, including:
* Store information, including store name, store URL, store settings, and branding information
* Product information, including titles, descriptions, pricing, product images, variants, collections, inventory status, tags, and metadata
* Order information, including order history, fulfillment status, shipping information, transaction details, and payment status
* Customer information, including names, email addresses, phone numbers, shipping and billing addresses, purchase history, and customer notes
* Theme and storefront content used to generate AI-powered customer support responses
* Merchant account information and billing-related information
* App settings, usage configurations, and installation information
Additionally, we may collect the following information directly from merchants and store visitors after the App is installed:
* Chat conversation content between customers and the AI assistant
* Customer support requests and communication history
* Device and browser information, including IP address, browser type, operating system, language settings, and device identifiers
* Usage analytics, diagnostic information, crash logs, and performance data
* Cookie and session information used for authentication, security, and service functionality
We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:
* **Cookies**: Data files stored on a device or browser that help maintain sessions and improve user experience
* **Log files**: Records of App interactions, including IP address, timestamps, browser type, and usage events
* **Web beacons, tags, and pixels**: Technologies used to analyze usage behavior and improve service performance
* **Analytics tools**: Used to monitor App reliability, usage patterns, and feature effectiveness
—
How Do We Use Your Personal Information?
We use the personal information we collect in order to provide, maintain, secure, and improve the Service, including to:
* Deliver AI-powered customer support and automated chat functionality
* Answer customer questions using store products, policies, and order data
* Generate personalized product recommendations and shopping assistance
* Process and manage customer conversations
* Improve AI response quality, automation accuracy, and App functionality
* Personalize customer support experiences
* Authenticate merchants and protect account security
* Monitor system performance and prevent fraud, abuse, or unauthorized access
* Provide analytics, reporting, and operational insights to merchants
* Communicate with merchants regarding updates, support requests, billing, and service-related notices
* Comply with applicable legal obligations and enforce our agreements
We may also use aggregated or anonymized information for analytics, research, machine learning optimization, and service improvement purposes.
—
Sharing Your Personal Information
We do not sell merchants’ or customers’ personal information.
We may share personal information with trusted third-party service providers that help us operate the App and provide the Service, including:
* Cloud hosting and infrastructure providers
* AI and machine learning service providers
* Analytics and monitoring providers
* Customer support and communication providers
* Payment and billing processors
* Security and fraud prevention providers
These third parties are granted access only to the information necessary to perform their services and are contractually required to protect personal information.
We may also disclose personal information:
* To comply with applicable laws, regulations, legal processes, or governmental requests
* To respond to subpoenas, court orders, or lawful requests
* To protect the rights, property, safety, or security of XChat, merchants, customers, or others
* In connection with a merger, acquisition, financing, or sale of assets
—
Behavioural Advertising
We may use limited analytics and advertising technologies to better understand how users interact with the App and improve marketing effectiveness.
You can opt out of targeted advertising through the following services:
* Google Ads Settings:
[Google Ads Settings](https://adssettings.google.com/?utm_source=chatgpt.com)
* Facebook Ad Preferences:
[Facebook Ad Preferences](https://www.facebook.com/adpreferences/ad_settings?utm_source=chatgpt.com)
You can also opt out of certain advertising services through:
[Digital Advertising Alliance Opt-Out Portal](https://optout.aboutads.info/?utm_source=chatgpt.com)
—
Your Rights
Depending on your location and applicable law, you may have the right to:
* Access the personal information we hold about you
* Request correction of inaccurate or incomplete information
* Request deletion of your personal information
* Restrict or object to certain processing activities
* Request data portability
* Withdraw consent where applicable
To exercise any of these rights, please contact us using the contact information below.
If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, please note that your information may be transferred outside your country, including to the United States and other countries where our service providers operate.
—
Data Retention
We retain personal information only for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.
When a merchant uninstalls the App, associated store-related data may be deleted or anonymized within a reasonable period unless retention is required for legal, regulatory, security, fraud prevention, or operational purposes.
Backup and system logs may be retained temporarily for disaster recovery, auditing, and security monitoring purposes.
—
Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or destruction.
However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
—
Children’s Privacy
The App is not intended for children under the age of 13, and we do not knowingly collect personal information from children.
—
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technologies, legal obligations, or operational practices.
Any updates will be posted on this page with a revised “Last updated” date.
—
Contact Us
If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact us:
* Email: [terryhuang@x-future.com](mailto:terryhuang@x-future.com)
If required under applicable law, you may also contact your local data protection authority.