Baarre · Legal & policies
Privacy Policy
How Baarre collects, uses and protects personal data — both yours as a merchant and your shoppers’.
1. Who we are
Baarre Technologies Ltd ("Baarre", "we") provides an AI customer-support assistant for online stores. Registered in London, United Kingdom, company number 14872301. For privacy questions, write to privacy@baarre.com.
Where you are a merchant using Baarre, we are the data controller for your account data and a data processor for the shopper conversations we handle on your behalf. The terms of that processing are in our Data Processing Agreement.
2. What we collect
| Data | Why | Kept for |
|---|---|---|
| Account details name, email, store, password hash | To create and secure your account | While your account is open, then 90 days |
| Store content products, collections, pages, policies, FAQs | So Baarre can answer accurately | Until you disconnect or delete it |
| Shopper conversations messages, channel, timestamps | To answer, and to show you the history | Your chosen retention — 90 days by default |
| Shopper contact details email, phone, social handle | Only when a shopper gives them to continue a conversation | Same as the conversation |
| Order data status, tracking, order number | To answer "where is my order?" | Read live — not stored beyond the chat |
| Usage and diagnostics IP, browser, pages, errors | Security, debugging, abuse prevention | 12 months |
| Billing plan, invoices, payment reference | To charge you and meet tax law | 7 years (legal requirement) |
We do not collect full card numbers. Payments run through Shopify or our payment provider.
3. Why we are allowed to use it
- Contract — to give you the service you signed up for.
- Legitimate interests — keeping the service secure, preventing abuse, and improving reliability.
- Consent — optional cookies, marketing email, and using your conversations to improve Baarre (off by default).
- Legal obligation — tax, accounting and lawful requests.
4. AI processing
Shopper messages are sent to our AI provider to generate a reply. We have agreements in place that stop those providers using your data to train their models. Baarre answers only from the content you synced — it does not browse the web or invent answers.
If you turn on "Use chats to improve Baarre" in Settings → Privacy, we may use anonymised conversations to improve answer quality for your store only. This is off by default.
5. Who we share with
Only the processors we need to run the service, each under contract: our cloud host, our AI provider, email and messaging delivery, error monitoring, and payments. The current list is on our Subprocessors page. We never sell personal data.
6. Where your data lives
Primary storage is in the EU (Frankfurt). Where a processor operates outside the UK or EEA, transfers rely on adequacy decisions or Standard Contractual Clauses.
7. Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or withdraw consent. Write to privacy@baarre.com and we respond within 30 days.
Shoppers should contact the store they chatted with first — the merchant controls that conversation. We help merchants fulfil those requests.
You may also complain to your supervisory authority; in the UK that is the ICO.
8. Security
Encryption in transit and at rest, role-based access, audit logging and least-privilege internal access. See our Security page. We notify affected merchants without undue delay, and within 72 hours where required.
9. Children
Baarre is for businesses and is not directed at anyone under 16.
10. Changes
We will email you at least 30 days before any material change takes effect.