Privacy policy

Prompta: ChatGPT AI Orders by Mulmil · Last updated 18 October 2026

This policy explains how Prompta: ChatGPT AI Orders (“the App”) collects, uses and shares information when a merchant installs it on a Shopify store.

Information we collect

• Store details from Shopify: shop domain and an access token.
• Storefront events from the App’s web pixel, only with the shopper’s analytics/marketing consent: page and product views, cart and checkout events, the referring AI assistant, landing page, the OpenAI ad click id (oppref), order id and value.
• For orders: country, region, city and postal code, IP address and user agent, and SHA-256 hashes of email, phone and name created in the shopper’s browser. Raw email, phone and names are never sent to us.
• OpenAI Pixel ID and Conversions API key entered by the merchant.

How we use it

• To show the merchant which visits and orders came from AI assistants and to tag those orders.
• If the merchant connects ChatGPT Ads: to send purchase conversions to OpenAI’s Conversions API.
• To provide support.

Sharing

We do not sell personal information. Data is shared only with: OpenAI (only when the merchant connects ChatGPT Ads). Our hosting provider (Cloudflare) processes data on our behalf.

Retention and deletion

Event data is kept for up to 13 months. Location, IP and hashed identifiers are only forwarded to OpenAI and are not stored by the App. When a merchant uninstalls the App, we stop collecting data; Shopify’s shop/redact request (48 hours after uninstall) deletes the store’s data. Customer data requests and redaction requests sent by Shopify are honoured.

Your rights

Merchants and their customers in the EU/EEA, UK and California can request access, correction or deletion of their data by writing to indianecomking@gmail.com. Customers may also contact the merchant directly.

Security

See our security and incident response policy.

Contact

Mulmil · indianecomking@gmail.com