Privacy Policy

Effective October 22, 2026

This policy explains how Reta Technologies ("Reta", "we", "us") collects, uses and shares information through Reta AI, an AI shopping assistant that online stores add to their websites, and through reta.shopping.

Who this policy covers

• Shoppers who use the Reta assistant on a store's website.
• Merchants: the businesses that install Reta on their store, and the people who use a merchant's Reta account.
• Visitors to reta.shopping and people who contact us.

When you shop on a store that uses Reta, we process your information on that store's behalf. The store's own privacy policy also applies to you.

Information we collect

From shoppers

• Your conversation with the assistant: the messages you type, the replies, and the products the assistant showed you.
• How you use the assistant: which products you click, the department you choose (for example men's or women's), and any rating or comment you leave.
• A random session identifier stored in your browser, so a conversation can continue across pages and so a purchase can be connected to the conversation that led to it. It is not linked to your name.
• Your name, only if a store asks for it (some demonstration stores ask testers for a name).

The assistant does not ask for your email, address or payment details. Please do not type sensitive personal information into the chat.

From orders

When you buy from a store that uses Reta, the store's platform (for example Shopify) sends us details of the order so we can measure what the assistant contributed: the order number, the products and quantities, prices, totals, currency, payment and refund status, and the session identifier if there is one. We store a one-way hash of the customer's email address, never the address itself. We do not receive card numbers, and we do not store shipping or billing addresses.

From merchants

• Account details, such as name, work email and role.
• The store's product catalog: titles, descriptions, images, prices, sizes and availability.
• Access tokens that the store's platform issues when the merchant connects Reta. We store them encrypted.
• Settings the merchant chooses, such as branding and greeting text.

From visitors and contacts

If you email us or request a demo, we receive the information you send, such as your name, email and store name.

Technical information

Our hosting providers keep standard server logs, which include IP address, browser type and the time of each request. We use them for security and to fix problems. We do not use advertising cookies or third-party tracking on the assistant or on reta.shopping.

How we use information

• To run the assistant: understand a request, search the store's catalog and recommend products.
• To show merchants how the assistant performs, including the sales it helped produce.
• To keep the service working and improve it. This includes people at Reta reviewing conversations to find and fix poor answers.
• To protect the service against abuse, fraud and security threats.
• To communicate with merchants and with people who contact us.

We do not sell personal information, and we do not share it for targeted advertising. We do not use shopper conversations to advertise to you.

AI processing

To generate replies, the text of your messages and relevant product information are sent to the AI providers listed below. Replies are generated automatically and can be wrong. Prices and availability on the store's own pages are the ones that apply.

Who we share information with

• The store you are shopping on. A merchant can see the conversations and analytics for its own store.
• Service providers that process information for us under contract:
  • OpenAI: language models that understand requests and write replies
  • Cohere: ranking search results
  • Pinecone: product search index
  • Supabase: database
  • Railway: application hosting
  • Vercel and Cloudflare: website hosting
  • Google: email delivery for feedback notifications
• The law and safety. When required by law, or to protect the rights, property or safety of Reta, our users or others.
• A business transfer. If Reta is merged, acquired or sells its assets, information may transfer as part of that transaction, under this policy.

How long we keep information

During this pre-launch phase we keep conversation, analytics and order data until it is deleted at a merchant's request or yours. We are introducing fixed limits: conversations kept for no more than one year, and a merchant's data deleted within 30 days after the merchant disconnects Reta. We will update this policy when those limits are in effect.

Security

Information is encrypted in transit. Merchant access tokens are encrypted at rest. Access to stored data is limited to the people and systems that need it. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your rights

You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. Email reta.aisolutions@gmail.com. Because shopper conversations are not linked to a name, it helps to tell us the store, the approximate date and time, and the session identifier if you have it. If you shopped on a merchant's store, we may also pass your request to that merchant.

California residents

Under California law, including the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to request deletion and correction; to opt out of the sale or sharing of personal information; and not to be treated differently for using these rights. We do not sell or share personal information as those terms are defined in that law. You can use an authorized agent to make a request. We will verify a request before acting on it.

Children

Reta is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Where information is processed

Reta is based in the United States, and information is processed and stored in the United States.

Changes to this policy

We will post any change on this page and update the effective date. If a change is significant, we will tell merchants directly before it takes effect.

Contact

Reta Technologies, California, United States
reta.aisolutions@gmail.com