SellChat — Privacy Policy

Last updated: 6 July 2026

SellChat ("we", "us") is operated by Refresh Group / Robin Dijkstra, Oostergoweg 1-4, Dokkum, the Netherlands. Contact: privacy@sellchat.nl.

SellChat is an AI chat that helps webshop visitors find the right product. This policy explains what personal data the SellChat service processes.

Roles

The webshop that installs the plugin is the data controller for its visitors' data. SellChat acts as a data processor on the shop's behalf. A Data Processing Agreement is available to shop operators on request.

What we process

From the shop (on catalog sync)

Product titles, descriptions, categories, tags, attributes, prices, stock status, product and image URLs. This is product data, not personal data.

From shop visitors (during a chat)

• the messages the visitor types;
• an anonymous session identifier (random, not linked to an identity);
• the current page URL / product id;
• the visitor's IP address — used only, server-side, for rate-limiting and abuse prevention; it is not stored with the conversation.

For revenue attribution

When a visitor who used the chat places an order, the shop's plugin sends the order id, the attributed amount, currency and any recommended product ids. To enable this the plugin stores two first-party cookies (see below). No name, address or payment data is sent to SellChat.

From shop operators (account)

Email address and, for paid plans, billing data handled by Mollie (we do not store card or bank details).

Cookies

Cookie	Purpose	Duration
aipa_reco	remembers recommended products to attribute later orders	30 days
aipa_chat	marks that the visitor engaged the chat (for chat-assisted revenue)	30 days

Attribution can be disabled by the shop (filter aipa_attribution_enabled); shops are responsible for obtaining any cookie consent required in their jurisdiction.

Sub-processors

• Anthropic (Claude) — generates chat replies; conversation content is sent to Anthropic to produce a response. anthropic.com/legal
• Supabase (hosting & database, EU region — Frankfurt) — stores accounts, the product index and usage. supabase.com/privacy
• Mollie (payments, paid plans only). mollie.com/privacy

Retention

Conversation metering records and the product index are retained while the account is active. Product data is replaced on each sync. Accounts and their data are deleted on request or after account closure.

International transfers

Core storage is in the EU (Frankfurt). Some sub-processors (e.g. Anthropic) may process data outside the EU under appropriate safeguards (e.g. SCCs).

Rights

Visitors can exercise their GDPR rights (access, erasure, etc.) via the webshop (the controller); the shop can reach us to fulfil such requests.

Changes

We may update this policy; the "last updated" date reflects the latest version.