1. Overview

Jimmy (“we”, “the service”) provides an AI-powered chat assistant for WooCommerce store owners. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

2. Data We Collect

• Account info: Your email and name from your Google account (via Google OAuth sign-in).
• Site data: Your WordPress site URL and an API key generated to authenticate requests.
• Chat messages: Messages sent to the AI assistant, stored temporarily to maintain conversation context (last 24 hours).
• Usage data: Token and request counts per session, for system monitoring purposes.
• Google Analytics data: If you connect GA4, we access your analytics data in read-only mode (sessions, users, conversions) on your behalf to answer your questions. We do not store raw GA4 data.
• Google Search Console data: If you connect GSC, we access your search performance data in read-only mode to answer your questions. We do not store raw GSC data.
• Google Ads data: If you connect Google Ads, we access your campaigns and performance data in read-only mode. We do not store raw Ads data.
• WhatsApp numbers: Phone numbers you link to your site for chat via WhatsApp.

3. How We Use Data

• To operate the chat assistant and process your store management requests.
• To authenticate your identity and maintain your session.
• To monitor system health and API usage costs.
• We do not sell your data to third parties.
• We do not use your data to train AI models.
• Google user data is used solely to provide the service features you explicitly requested.

4. Third-Party Services

• Google OAuth: Used for sign-in. Subject to Google's Privacy Policy.
• Google Analytics API: Accessed only when you explicitly connect GA4, and only for your GA4 property.
• Google Search Console API: Accessed only when you explicitly connect GSC.
• Google Ads API: Accessed only when you explicitly connect Google Ads.
• Amazon Bedrock (AWS): AI responses are generated using Anthropic's Claude via AWS Bedrock.
• WhatsApp (Meta): WhatsApp messages are processed via the WhatsApp Business API.

5. Data Storage & Security

All data is stored in a private PostgreSQL database on AWS (us-east-1). API keys and OAuth tokens are encrypted at rest using AES-256-GCM. Database access is restricted to application servers only.

6. Data Retention

• Chat messages: retained for 24 hours for conversation context, then no longer actively used.
• Account and site data: retained until you delete your account or disconnect your site.
• Usage logs: retained for up to 12 months for billing and monitoring purposes.

7. Your Rights

You can disconnect your site, revoke Google OAuth access, or request deletion of your data at any time by contacting us. To revoke Google API access, go to your Google Account → Security → Third-party apps and revoke “Jimmy”.

8. Contact

For any privacy-related questions, contact us at: jimmy.helper.go@gmail.com