İçeriğe atla
RoMuAI

Privacy Policy — RoMuAI AI Customer Service for Shopify

Last updated: September 2026

RoMuAI ("we", "us") provides the "RoMuAI – AI Customer Service" app for Shopify merchants. This policy explains what data we process, why, and what rights are available to merchants and their end customers.

1. Who we are

RoMuAI is operated by Mustafa Kahraman, Beşiktaş / Istanbul, Turkey (VKN 488 077 3953). Contact: support@romuai.com.

2. Data we process

  • Merchant account data: store name, contact email, and Shopify store configuration needed to install and operate the app.
  • Store data via the Shopify API: product catalog, inventory, order status, and shipping information, accessed only to generate accurate AI responses.
  • End-customer chat data: messages exchanged with the AI assistant on the merchant's storefront, plus IP address and basic browser information, processed to deliver the support conversation.

3. Controller and processor roles

For end-customer chat data, RoMuAI acts as a data processor, operating on the instructions of the merchant who installed the app. The merchant remains the data controller for their end customers and is responsible for their own privacy disclosures to shoppers. For merchant account data itself, RoMuAI acts as the data controller.

4. How data is used

Data is used solely to: operate and maintain the chat service, generate accurate AI responses about products/orders, provide technical support, and produce anonymized usage statistics. We do not use merchant or end-customer data to train third-party models beyond what is required to power the assistant, and we do not sell data.

5. Data sharing

Store and API credentials are encrypted at rest and never shared with third parties. Data may only be transferred to infrastructure or email providers strictly necessary to run the service, under contractual confidentiality obligations.

6. Data retention and security

Data is retained only as long as needed to provide the service or as required by law, and is stored using industry-standard encryption.

7. Your rights

Merchants and end customers may request access, correction, deletion, or object to processing of their data by contacting support@romuai.com. Depending on your jurisdiction (including GDPR for EU/EEA users and KVKK for Turkey), additional rights may apply.

8. Changes to this policy

We may update this policy from time to time; material changes will be reflected on this page with an updated date.