1. Overview

This Privacy Policy explains how NoahFirst collects and processes data when you use our service. NoahFirst is designed to process store and customer interaction data only as necessary to provide and operate the service.

2. Data We Process

We process limited data necessary to operate the service, including:

• Account information (such as email and store URL)
• Store data (such as product information, inventory, and policies)
• Customer interaction data (such as messages submitted through the chat interface)
• Technical data (such as API requests and usage logs)
• We do not collect or process data beyond what is required to provide the service.

3. How Data is Used

We use the data only to:

• Generate AI responses to customer inquiries
• Provide and maintain the service
• Improve system performance and service reliability
• Monitor usage and detect misuse
• We do not use your data for advertising or unrelated purposes.

4. Data Processing and External Services

To provide the service, data may be transmitted to:

• IDCloudHost (infrastructure provider)
• OpenAI (AI processing provider)

All subprocessors are bound by data processing agreements that require confidentiality, security, and restricted use of data. This includes:

• Customer queries
• Relevant store data needed to generate a response

Data is processed solely to generate real-time responses. We do not use your data to train shared or public AI models.

5. Data Retention

We retained for up to 60 days after account deletion, or as required for operational and legal purposes

• Operational logs are retained for a limited period
• Account data may be retained for up to 60 days after account deletion
• Financial or legal records may be retained longer where required by law

6. Data Sharing

We do not sell or share your data with third parties for marketing purposes. Data is shared only:

• with service providers required to operate the system (e.g., infrastructure and AI providers)
• within the context of customer interactions initiated by your store

7. Data Security

We implement technical and organizational measures to protect data including:

• Encrypted communication using HTTPS (TLS)
• Access controls and system monitoring
• Logical separation of customer data

For more details, please refer to our Security Policy.

8. Your Rights

You may request to:

• Access your data
• Delete your data
• Correct inaccurate data

Requests can be sent to: service@noahfirst.com

9. Changes

We may update this Privacy Policy from time to time. Continued use of the service constitutes acceptance of the updated policy.