Privacy policy

Updated 22 October 2026

This policy covers the ShopPilot web app and Chrome extension. ShopPilot helps you carry out tasks in your existing browser tools. For privacy questions, access, export or deletion requests, contact info@shoppilot.ch.

Information we handle

• Account information: your account identifier, name, email address, profile image and sign-in/session information, provided through Google sign-in and Clerk. Google sign-in does not grant us access to your Gmail inbox.
• Your work: messages, uploaded files, task instructions, responses, approvals, schedules, tutorials and saved evidence. If you use dictation, audio is sent to OpenAI for transcription and the resulting text appears in your composer.
• Browser task information: URLs, titles, page content, screenshots and interaction results from the tabs ShopPilot manages for your tasks. This can include customer details, communications and business or financial information visible in the tools you ask it to use. The extension uses your existing signed-in merchant sessions; it does not require you to give ShopPilot your merchant passwords.
• Connection and operational information: an extension connection credential, task/browser state and technical information needed for authentication, error diagnosis, security and service operation. Servers and service providers may receive your IP address and request metadata. We do not use a browser-history API to collect your unrelated browsing history.

How we use and share information

We use this information to authenticate you, execute and verify your requests, show progress, save your work, run authorized schedules, provide support and protect the service. Browser task content is transmitted to the ShopPilot backend and OpenAI for AI processing. The app is not local-only software.

Our service providers include Clerk for authentication, Google for sign-in, OpenAI for AI processing and transcription, and AWS for production hosting and storage. These providers may process data outside your country. Requested actions may also send information to the merchant websites or other destinations involved in your task.

We do not sell user data, use it for advertising, or use it to determine creditworthiness or for lending. Our use and transfer of data received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Transfers are limited to providing the service, security, applicable legal requirements, or a business transfer permitted by that policy. Human access to browser task data is limited to your explicit permission, necessary security investigations, legal requirements or data aggregated and anonymized as permitted by that policy.

What the Chrome extension stores

The extension saves only the connection details needed to reconnect to ShopPilot: a private connection credential and server address, and a setting that remembers when you disconnect. These stay in local extension storage on your device, not Chrome Sync, and are not accessible to website content scripts.

The extension does not maintain a saved archive of your chats, uploaded files, page content or screenshots in extension storage. During a task, it handles browser state and captures in memory and transmits task information to the ShopPilot backend. This information can then be processed by OpenAI and saved by ShopPilot as described above. Not storing an archive in the extension does not mean task information stays on your device.

Uninstalling the extension removes its local storage. Disconnecting stops browser access; it does not delete your ShopPilot account or saved work.

Backend storage and retention

Saved conversations, uploaded files, evidence, schedules, tutorials and execution records are stored by the backend to provide history, recurring work and recovery. This storage is separate from the extension. Disconnecting or uninstalling the extension does not delete it.

We retain account and task data while needed to provide these features, unless you request deletion. Some records may need to be retained for security, legal obligations or backup recovery. Removing a visible item is not a promise that every execution record or backup has immediately been erased. Contact us for deletion or export of your account data; we may verify your identity before fulfilling the request. Service providers also apply their own retention practices.

Your controls

You choose the tasks and tools ShopPilot uses. Regular chats request approval when a consequential action needs confirmation. Scheduled tasks use the authorization you give when enabling them. Review the instructions and the information visible in your merchant tools before starting work.

You can stop a task, pause schedules, disconnect the extension, sign out or uninstall it. Disconnect stops browser control and automatic reconnection until you explicitly reconnect. It does not undo completed actions in another service. Manage those results in the relevant merchant tool.

Authentication uses session cookies or equivalent storage. Production connections use HTTPS/WSS. No system can guarantee absolute security; avoid sharing secrets or unrelated sensitive information in chat or task tabs.

Changes and contact

We update this page when our data practices change and update the date above. Contact info@shoppilot.ch to ask about this policy or exercise applicable privacy rights.