Privacy Policy

Shopperquest (“Shopperquest”, “we”, “us”) is operated by Hongtai Ventures (the “Operator”). This Privacy Policy explains what information we collect through shopperquest.app and the Shopperquest application (together, the “Service”), how we use it, and the choices you have. It applies to shoppers who hold Shopperquest accounts (“Shoppers”), to their customers who use client portals, shared links, and storefronts (“Clients”), and to visitors of our public pages.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information. Name, email address, and password credentials, or — if you sign in with Google — the name, email address, and profile image Google shares with us.
• Business records entered by Shoppers. Client names, contact handles, shipping addresses, notes, preferences, requests, quotes, invoices, order and tracking details.
• Communications. Messages exchanged through the built-in chat and support inbox, and requests submitted through storefronts.
• Files. Photos, receipts, attachments, and review images uploaded to the Service.
• Technical data. IP address, browser and device information, and server logs generated by normal operation, including anti-abuse signals from Cloudflare Turnstile on public forms.

We do not collect or store payment card numbers or process payments. Payments between Shoppers and Clients happen entirely outside the Service, through payment links the Shopper provides.

• To provide and operate the Service: accounts, workspaces, requests, quotes, invoices, storefronts, portals, and chat.
• To send transactional emails and notifications (for example order status updates, new-message alerts, and account emails). Notification preferences can be adjusted in settings.
• To provide AI-assisted features, described in Section 4.
• To protect the Service: preventing spam, abuse, and unauthorized access.
• To maintain, debug, and improve the Service.
• To comply with legal obligations.

We do not sell personal information, and we do not use your content for third-party advertising.

The Service includes optional AI features: parsing free-form requests into structured drafts, and drafting or (where a Shopper enables it) automatically sending support replies. To provide these features, relevant content — such as a request’s text or a support conversation — is processed by our AI provider, Anthropic. We do not permit our AI provider to use this content to train its models. AI output is generated automatically and may be inaccurate; Shoppers remain responsible for what they configure the AI to do and send.

For account information and technical data, the Operator determines how the data is used and acts as the data controller.

For records a Shopper enters or receives about their Clients (contact details, addresses, order history, messages), the Shopper is the controller of that data and Shopperquest processes it on the Shopper’s behalf to provide the Service. Shoppers are responsible for having the right to enter their Clients’ information. Clients who have questions about data their Shopper holds should contact that Shopper first; we will assist where we reasonably can.

We share information only with the service providers we use to run Shopperquest, each bound by its own contractual and confidentiality obligations:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Anthropic — AI processing (Section 4).
• Resend — transactional email delivery.
• Cloudflare — Turnstile anti-abuse verification on public forms.
• Google — sign-in, if you choose to authenticate with Google.

We may also disclose information where required by law or legal process, to protect the rights, safety, or property of the Operator or others, or as part of a merger, acquisition, or sale of assets (in which case this Policy continues to apply to your information).

The Service uses essential cookies only: session cookies that keep you signed in and a preference cookie for your language. We do not use advertising or cross-site tracking cookies.

We keep information for as long as the related account is active or as needed to provide the Service. When an account is closed or a deletion request is verified, we delete or de-identify the associated personal information within a reasonable period, except where we must retain records to comply with legal obligations, resolve disputes, or enforce agreements. Residual copies in encrypted backups are purged on the normal backup cycle.

We protect information with encryption in transit, workspace isolation enforced at the database layer (row-level security), scoped access tokens for shared links, and least-privilege access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is operated from Canada and uses service providers that may store or process information in other countries, including the United States. Wherever information is processed, it is protected by the terms of this Policy and our agreements with those providers.

Depending on where you live — including under Canada’s PIPEDA, the EU/UK GDPR, and Japan’s APPI — you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at legal@shopperquest.app; we may need to verify your identity before acting. If your request concerns data held by a Shopper about you as their Client, we may refer the request to that Shopper as the controller.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. If we make material changes, we will notify account holders by email or in-app notice before the changes take effect. The “Effective” date above reflects the latest revision.

Shopperquest, operated by Hongtai Ventures
legal@shopperquest.app