Privacy Policy

Suprlative is operated by Suprslay Technologies Private Limited (“Suprlative”, “we”, “us”). We provide an AI shopping-assistant platform that brands embed on their storefronts and connect to messaging channels including web chat, WhatsApp, and Instagram. This policy explains what data we process and why. For data processed on behalf of a brand, that brand is the data controller and Suprlative acts as a processor.

We collect only what is needed to run the assistant:

• Messages and conversation content.The text a shopper sends and the assistant's replies, so we can answer questions, make recommendations, and continue a conversation.
• Instagram and WhatsApp data.When a brand connects an Instagram or WhatsApp account, we process direct messages, comments the assistant is asked to respond to, and the sender's platform-scoped identifier and public profile name provided by Meta's APIs. We use this solely to deliver and continue the conversation on that channel.
• Contact details you provide. Such as name, email, or phone number if a shopper shares them or requests a human handoff.
• Store and catalog data.When a brand installs our Shopify app, we read the store's name, primary domain, currency, and account email so we can create the brand's workspace and invite its owner. We then read products, variants, inventory availability, prices, images, and tags so the assistant can recommend what the store actually sells.
• Order data, limited to purchase attribution. When an order is placed, we read only the order's line items, its order name (for example #1001), and the identifiers our own assistant attached to the conversation. We use this solely to tell the brand which purchases followed an assistant conversation. We do not read the customer's name, email address, phone number, or billing or shipping address from orders.
• Technical and usage data. Coarse diagnostics such as timestamps, channel, request identifiers, and error logs used to operate and secure the service.
• Visual-analysis photos and results. When you explicitly consent and submit a photo, we send it to an AI model provider to produce non-diagnostic shopping guidance. Suprlative does not persist the raw photo after the analysis request. We may retain a compact result, image fingerprint, consent record, quality signals, and associated recommendations so the experience can continue and be audited.

We do not sell personal data, and we do not use messaging content to serve advertising.

• Generate and deliver assistant responses to shopper questions.
• Analyze a consented photo to provide visual shopping guidance and product matches.
• Continue a conversation across channels (for example, moving a web chat to WhatsApp, or replying to an Instagram DM or comment).
• Route conversations to a human agent when a handoff is requested.
• Provide brands with aggregated analytics about assistant performance.
• Maintain security, prevent abuse, and comply with legal obligations.

Our Instagram and WhatsApp features use Meta's APIs. Data obtained through these APIs (such as direct messages, comments, and platform-scoped user identifiers) is used only to provide the messaging features described above, in accordance with the Meta Platform Terms and Developer Policies. We request the minimum permissions required and never use Meta Platform data for advertising, resale, or any purpose unrelated to responding to the shopper's message.

We share data only with providers that help us operate the service, under contractual confidentiality and data-protection obligations:

• AI model providers (for example, OpenAI) to generate assistant responses and visual-analysis results. Message or photo content sent for inference is not used by these providers to train their models where such controls are available.
• Messaging and infrastructure providers (for example, Meta for Instagram and WhatsApp delivery, and cloud hosting and database providers) to transmit and store conversations.
• Commerce providers(for example, Shopify) to retrieve the product, catalog, and limited order information described in section 2, and to create carts that check out through the brand's own Shopify checkout. We never process payments ourselves and never send a shopper to a third-party checkout.

We do not keep personal data indefinitely. Data past its retention window is deleted automatically by a scheduled daily process:

• Conversations and messages — deleted 365 days after the conversation was created.
• Operational and diagnostic records (events, assistant request logs, model call records) — deleted 90 days after they are written.
• Shopper contact records (such as an email or phone number a shopper chose to share) — deleted after 730 days without further activity.

Brands may request shorter retention, and may request deletion of specific data on behalf of their shoppers at any time.

Raw visual-analysis photos are processed in memory and are not written to Suprlative's database. Visual-analysis session records expire after 30 days by default, and reusable analysis cache entries expire sooner. A shopper can use the “Delete this analysis” control to remove the session result immediately.

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise these rights, or to request deletion of data associated with your Instagram or WhatsApp account, contact us at hello@suprlative.com with the subject line “Data Deletion Request” and the handle or identifier you used. We will verify the request and delete the associated data within 30 days. You may also revoke Suprlative's access at any time from your Instagram or WhatsApp account settings, which stops further processing.

Shoppers on a Shopify store. If you ask a merchant to delete your data, Shopify notifies us automatically and we delete the contact records and shopper profile we hold for you. If a merchant uninstalls Suprlativeor asks Shopify to erase their store's data, we delete the shopper personal data we hold for that store and remove our connection to it. You do not need to contact us separately for these requests, though you are welcome to.

Suprlative uses AI models to answer questions and suggest products. These are shopping suggestions only. They do not decide anything that has a legal or similarly significant effect on you, they are not used to score or profile you for credit, employment, insurance, or pricing, and they never change the price a shopper is offered. A shopper can ignore any suggestion, and can ask to speak to a human at any point in a conversation.

Visual analysis runs only on a photo you explicitly choose to submit, and produces non-diagnostic shopping guidance. It is not a medical assessment and must not be treated as one.

We protect data with encryption in transit, encryption of access tokens at rest, strict access controls, and tenant isolation so one brand's data is not accessible to another. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

We operate from India and may process data on infrastructure located in other regions. Where required, we put appropriate safeguards in place for cross-border transfers.

The service is intended for use by businesses and adult shoppers. We do not knowingly collect personal data from children.

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, through additional notice.

Suprslay Technologies Private Limited
Bangalore, India
Email: hello@suprlative.com