Legal notice and privacy policy
Publisher
GiulIA is a Shopify app published by My Little Coupon SASU, a French company registered under SIREN 898 530 811, 31 rue des Ormes, 78860 Saint-Nom-la-Bretèche, France. Contact: es@mylittlecoupon.fr. The getgiulia.com website and the app server are hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).
What GiulIA does
GiulIA adds a chat sales advisor to the online store of the merchant who installs it. It reads the store’s catalog and answers visitors using an artificial-intelligence model. The merchant remains the controller of their customers’ data; GiulIA acts as a processor, on the merchant’s behalf and instructions.
Data processed for the merchant
| Data | Purpose | Retention |
|---|---|---|
| Catalog (products, prices, stock, collections, fields chosen by the merchant) | Advise and display products | While the app is installed |
| Store policies, FAQ page | Pre-fill practical information | While the app is installed |
| Chat messages, anonymized before storage (emails, phone numbers, long numbers and first names masked) | Merchant back office, answer improvement | 90 days |
| Products added to cart from the chat (title, price) | Measure the advisor’s effectiveness | 90 days |
| Orders placed after a conversation: number, amount, items coming from the chat (no name, address or email) | Attributed sales | At most 13 months |
| Logged-in customer identifier, provided by Shopify | Personalize the answer and provide order tracking; not stored | Duration of the request |
| Order number and email typed for tracking | Check that the order belongs to the person; not stored, masked in logs | Duration of the request |
The chat asks visitors for no name, no email and no account. No advertising cookie or third-party tracker is set: the widget only keeps, in the browser’s session storage, a random visit identifier that disappears when the tab is closed.
Merchant data
To run the app we keep the store domain, an encrypted Shopify access token, the advisor settings, the subscription status and usage counters (conversations, overage). The email address of the merchant’s Shopify account may be used to inform them of an incident or a significant change.
Service providers
- Cloudflare, Inc.: hosting of the server and databases (global network; data stored according to Cloudflare’s network location, United States and European Union).
- Anthropic, PBC (United States): Claude AI model. Receives the text of messages and catalog excerpts to produce each answer. Under Anthropic’s commercial API terms, this data is not used to train its models.
- Shopify Inc.: store platform, installation, billing.
Transfers outside the European Union therefore take place to the United States; they are governed by these providers’ standard contractual clauses and, where applicable, the Data Privacy Framework.
Your rights
A store’s customers exercise their rights (access, rectification, erasure, objection, restriction, portability) with the merchant, who is the controller. GiulIA relays requests forwarded by Shopify: to an access request, we answer that we hold no identifying data about the person; to an erasure request, we remove their orders from attributed sales. Anyone may also write to es@mylittlecoupon.fr and, in the EU, contact their data-protection authority (in France, the CNIL).
Uninstall and deletion
On uninstall, the access token and the catalog copy are erased immediately; all other store data is erased when Shopify’s notification is received, 48 hours later.
Security
Tokens encrypted at rest, encrypted communications (TLS), signatures verified on every request coming from Shopify, strict data isolation between stores, rate limiting per visitor and per store. Secrets are never stored in the code.
Changes
This policy may change along with the app; the date at the top prevails. Significant changes are announced to installed merchants.