Data processing,
in summary.
A plain-language summary of how Commerco processes your shoppers’ data on your behalf. The binding terms are in your service agreement.
1. Roles
You, the merchant, decide why your shoppers’ data is processed (controller). Commerco processes it on your behalf to run the assistant and its measurement (processor).
2. What is processed
- Conversation text with the assistant, with email addresses and phone numbers masked; voice is processed live and not recorded.
- Random visitor and cart identifiers, page types and assistant contact levels, used to link orders to the assistant and to run the control group.
- Order records from your platform (order number, total, status, products) needed for measurement.
- Only if you turn them on: email, WhatsApp or other channel messages you send through Commerco, with the recipient’s consent records.
3. Sub-processors
- Hetzner Online GmbH — hosting, Germany.
- Google — Gemini API, generating the assistant’s answers, United States.
- Only if you enable email journeys or connect messaging channels: the delivery provider for that channel.
4. Retention
- Conversation summaries 180 days, visit records 180 days, goal records 180 days, display records 90 days.
- Deleted records remain in daily backups for at most 30 more days.
- When you uninstall, deletion of your store’s data follows your service agreement.
5. Security
Store access credentials obtained when you install are stored encrypted. Admin actions require authentication and are written to an audit log.
6. Company
Company details are provided in your service agreement.