Privacy policy
Last updated 15 October 2026.
AK Chat Feed & Pixel is a Shopify app that sends a store's product catalogue to the store's own OpenAI Ads account and sends the store's visits and purchases to it as conversion events, so the store can advertise in ChatGPT and see what its ads sell. I built it and I run it. This page says what it reads, what it sends, what it keeps, why, where, for how long, and how to have all of it deleted.
What the app reads
From your store: your products and variants (titles, descriptions, prices in each market, stock, images, barcodes, vendors, types, tags, collections, categories, review ratings), your markets and languages, your store's name, address country and refund policy link, and your orders (number, items, prices, totals, refunds, the page the visit started on and the site it came from). For each online order it also reads the customer's email, phone, name and address and the browser's IP address and user agent, to report the purchase to OpenAI.
From your store's pages and checkout, through Shopify's web pixel and only as your cookie banner allows: which pages and products a shopper views, what goes into the cart, checkout steps and purchases, the shopper's IP address and browser, and, during checkout or when a shopper is logged in, their email, phone and name, which the pixel turns into one-way SHA-256 hashes in the shopper's own browser before anything is sent. City, region, postcode and country are sent as they are, because OpenAI asks for them that way.
Cookies on your store
With a shopper's marketing consent, the pixel keeps two first-party cookies on your store, the same ones OpenAI's own pixel uses: __oppref, the click id of an OpenAI ad the shopper came from (30 days), and __obref, a random browser reference (365 days). Without consent it sets nothing and reads nothing.
What it sends to OpenAI
With the keys you give it, into your own OpenAI Ads account: your product feed, and conversion events carrying the hashed email, phone, name and customer id, the city, region, postcode and country, the IP address and browser, the click id and browser reference, and what was viewed, added or bought. OpenAI then holds them under your agreement with OpenAI. Raw emails, phones and names are never sent.
What it keeps, and why
- Each variant's feed state, its reason when it isn't in the feed, and the price and stock last sent: the Products page.
- Each upload and what OpenAI reported for it: the Feeds page.
- An event log (event type, time, value, whether it was sent, and which kinds of matching data it carried, without the data). The hashed and location details an event sends are kept only until it is sent and cleared then; an event that cannot be sent has them cleared after 8 days. The log itself is kept for 30 days.
- For each online order: its number, time, total, refunds, products and whether it came from a ChatGPT ad, from ChatGPT's own answers or elsewhere: the Reports page. No customer details.
- OpenAI's reported spend, clicks, impressions and conversions for your campaigns and products.
- Your settings, your OpenAI keys and your feeds' SFTP passwords, encrypted, with each key's last four characters in the clear so the app can show which one is connected.
When it's deleted
When you uninstall the app, its work for your store stops at once. Everything it holds for your store stays for 48 hours and is then deleted, when Shopify tells the app to (and within 7 days if that message never comes). If you reinstall within those hours, nothing is deleted. The app's database is copied every night, encrypted, so it can be recovered after a fault; each copy is deleted after 14 days. Shopify's API terms give an app 30 days after an uninstall to delete a store's data.
When Shopify passes on a customer's request to be forgotten, the app deletes the order rows and events it holds for the orders Shopify names.
Where it's kept, and who else sees it
On a server I rent from Contabo, in the European Union. No one I choose sees it. I don't sell or share data, and the app uses no advertising or analytics services of its own. The only other companies involved are Shopify, where your store and your plan live, OpenAI, which receives your feed and events in your own account, and Contabo, which rents me the server. The server's logs record your store's address, ids, states and counts, and no customer details. These public pages set no cookies and load nothing from other sites.
The app's page on the Shopify App Store uses Google Analytics, through the tracking Shopify offers app developers, to count visits to that page, Install clicks and installs, with the App Store search and position that led to them. For an install, Shopify includes the store's name and myshopify address. Shopify runs that page under its own privacy policy. Nothing from inside the app goes to Google Analytics.
Your requests
To get a copy of what the app holds for your store, or to have it deleted without uninstalling, write to me from the store owner's email address. I carry out the request and confirm when it's done.
If something goes wrong
If your store's data is exposed, I tell Shopify and I tell you directly.
Contact
An independent developer in Pakistan. Write to me at support@aislekit.app.