Privacy policy
Last updated 4 October 2026
In short: Basket AI works from your store's products and orders. We never store shoppers' names, emails, phone numbers or addresses. Shopper and customer IDs are kept only as one-way scrambled codes, data is stored in London, and we delete it on request or when you uninstall.
Who we are
Basket AI ("we", "us") provides AI product recommendations, fit advice and an AI shopping assistant ("Edie") to online retailers, mainly through our Shopify app. For merchant data we are a processor acting on the merchant's instructions; for our own website, sign-up forms and merchant accounts we are the controller. Contact us through our contact form.
What we collect from merchants' stores
| Data | Why |
|---|---|
| Products, variants, prices, cost prices, stock levels and images | To choose add-ons that are in stock, fit and protect margin. |
| Order lines, refunds, returns and return reasons (with the customer ID replaced by a salted one-way hash) | To learn which products are bought together and which sizes are returned. We cannot turn the hash back into a customer. |
| Shop details (domain, plan, currency) and the access token Shopify issues | To connect to your store and keep the catalogue in sync. |
| Billing records (subscription status, AI tokens used per day) | To bill through Shopify and show you the AI usage you are charged for. |
We do not request or store customer names, email addresses, phone numbers or postal addresses.
What we collect from shoppers on a store
| Data | Why |
|---|---|
| A random visitor ID (first-party cookie or browser storage, set only where the store's consent banner allows) | To count which recommendations are seen and bought, and to compare against a hold-out group. |
| Widget events: products viewed, recommendations shown, clicked and added to the cart | To measure and improve recommendations. |
| A shopper's usual size, if they enter it (kept in their own browser) | To give fit advice and the two-sizes check. |
| Messages typed to Edie, the AI shopping assistant (first 300 characters of each) | To answer the shopper, and so the merchant can review conversations and spot missing products. |
Shoppers should not type personal details into the assistant; it does not need them and will not ask for them.
AI processing
Product descriptions, shopper messages to Edie and merchant questions in the console are sent to Anthropic's Claude models to generate answers and product insights. Anthropic processes this data on our behalf and does not use it to train its models. We send no customer names or contact details to the AI.
Where data is stored and who processes it
- Supabase: database and file storage, London (UK).
- Railway: application hosting.
- Anthropic: AI processing (United States), under standard contractual clauses and the UK addendum.
- Shopify: app installation, billing and the source of store data.
All data is encrypted in transit (TLS) and at rest.
How long we keep it
- Messages shoppers type to Edie: 90 days.
- Other widget events: 13 months, so year-on-year results can be measured.
- Store data: while the app is installed. When a store uninstalls, Shopify sends us a shop deletion request within 48 hours and we delete all of that store's data.
- Website enquiries and merchant console accounts: until you ask us to delete them, or two years after last contact.
Shopify privacy requests
We handle Shopify's mandatory privacy webhooks automatically. A customer data request is answered from the hashed records we hold; a customer redaction removes that customer's order history from our records at the next sync; a shop redaction deletes everything we hold for the store.
Your rights
Under UK GDPR you can ask for access to, correction of or deletion of your personal data, object to or restrict processing, and complain to the Information Commissioner's Office (ico.org.uk). Shoppers should contact the store they shopped with, which will pass requests to us where needed. Contact us through our contact form and we will reply within one month.
Cookies
On merchants' stores we set one first-party cookie (_bb_vid, one year) and may use browser storage for a shopper's usual size, only where the store's consent settings allow. This website uses no advertising or tracking cookies.
Changes
If we change this policy in a way that matters, we will tell merchants by email and in the app before the change takes effect.