Who we are
AIcart is operated by Cloneverse, Gulshan-e-Iqbal, Karachi. AIcart helps online merchants understand and improve how their stores appear to AI assistants and search engines.
This policy explains what we collect, why, and what we do with it.
What this covers
This policy covers the AIcart application and the AIcart beacon script that merchants install on their storefronts. It does not cover the merchant’s own store, which is governed by that merchant’s own privacy policy.
Information we collect
From merchants who connect a store
Store and product data. When you connect Shopify or Magento, we read your product catalogue — titles, descriptions, prices, inventory, images, and identifiers. We also read order data where you have granted that permission, in order to attribute sales that originated from AI assistants.
Account information. Your store domain, and — if you sign in with Google — the email address and name on that Google account. Merchants who connect through Shopify may have no email address on file with us at all.
Credentials. Access tokens for the platforms you connect. These are encrypted at rest using AES-256-GCM and are never displayed back to you or to anyone else.
Usage and cost records. Which features ran, when, what they cost, and who triggered them.
From Google, if you connect Search Console
With your permission, we access Google Search Console data for the property you select: search performance, index coverage, and URL inspection results. We request read-only access.
We use this data solely to show you your own search performance and to identify issues with your site. We do not use Google user data to train or improve any machine learning or AI model, and we do not sell it or transfer it to third parties except as needed to provide the service you asked for. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google at any time from within the app, and revoke our access directly at myaccount.google.com/permissions.
From storefront visitors, via the beacon
If you install the AIcart beacon on your storefront, it records that a visit arrived from an AI assistant — which assistant, which page, and when.
The beacon is designed not to collect personal information. It does not set cookies, does not fingerprint devices, does not track visitors across sites, and does not record names, email addresses, or payment details. It records the referring source and the page visited, associated with your store, not with a person.
If you install the beacon, you are responsible for disclosing it in your own store’s privacy policy as your local law requires.
How we use information
- To sync and display your catalogue
- To generate product content, grounded in the data you already have
- To publish structured data and approved content back to your store
- To detect issues with your site and product data
- To sample AI assistants with buyer-style questions and measure how your store appears
- To attribute orders that originated from AI assistants
- To meter usage against your plan and enforce spending limits
- To communicate with you about the service
We do not sell your data. We do not share it with advertisers.
AI providers
Generating content and sampling AI assistants means sending data to third-party AI providers. Today those are Anthropic, OpenAI, Google, and Perplexity.
What we send: product information from your catalogue, and the questions we ask on your behalf. We do not send customer personal data, order details, or payment information to AI providers.
Merchants on eligible plans can supply their own provider API keys, in which case that traffic runs under your own agreements with those providers rather than ours.
Sharing
We share information only with:
- Infrastructure providers who host the service (including Hostinger and our application hosting providers) — they process data on our instructions and do not use it for their own purposes.
- AI providers, as described above.
- The platforms you connect — Shopify, Magento, Google — when carrying out actions you have asked for.
- Authorities, where we are legally required to.
If we are ever acquired or merged, your data may transfer as part of that transaction. We would tell you before it happened.
People you invite
A store can have several people on it. If you invite someone, we store their email address, name, role, and who invited them, and we record which actions each person takes. That record exists so a store owner can see who changed what.
Retention and deletion
We keep your data while your store is connected.
When you disconnect a store or uninstall the app, we delete your access credentials and end active sessions immediately. Catalogue and measurement data is deleted within 30 days.
To delete everything sooner, contact us at info@cloneverse.ai and we will do it.
Some records — billing history, and audit logs of actions taken — we keep longer where we are required to.
Your rights
Depending on where you are, you may have the right to access, correct, delete, or export your data, to object to certain processing, and to complain to a data protection authority.
Contact us at info@cloneverse.ai and we will respond within the time your law requires.
Security
Credentials are encrypted at rest. Sessions use signed, HttpOnly cookies. Every request is scoped to a single store, and access within a store is limited by role.
No system is perfectly secure, and we won’t claim otherwise. If we discover a breach affecting your data, we will tell you.
International transfers
Data may be processed outside your country, including in the United States, where our AI providers and infrastructure operate. Where required, we rely on appropriate safeguards for such transfers.
Children
AIcart is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
Changes
If we change this policy materially, we will notify you in the app before the change takes effect. The date at the top always reflects the current version.
Contact
info@cloneverse.ai
Cloneverse
Gulshan-e-Iqbal, Karachi