Privacy Policy

Junymo (“Junymo”, “we”, “us”) provides an AI-powered customer support agent for Shopify merchants. This policy explains what data we collect from merchants and their customers, why we collect it, how we store it, and the rights you have over that data.

Contact: support@junymo.com
Mailing address: 440 N Volland St Apt D203, Kennewick WA 99336

When a merchant installs Junymo on their Shopify store, we collect:

• Shop data: shop domain, store name, installed app access token, and configuration you provide (brand voice, policies, FAQs).
• Order and customer data via the Shopify Admin API: order details, fulfillment status, tracking numbers, customer email, shipping address, and product catalog. We request this data only when it is needed to answer a specific customer question (e.g., an order lookup).
• Chat transcripts:messages customers send to the Junymo widget on your storefront, along with the customer's email (if they provided it) and an anonymous session identifier.
• Ticket metadata: timestamps, resolution status, merchant notes, and internal tags used to organize the support inbox.

We use this data solely to:

• Answer customer support questions on behalf of the merchant.
• Look up orders, process refunds and exchanges, and perform other support actions the merchant has authorized.
• Provide merchants a dashboard to review conversations, tickets, and analytics.
• Improve reliability and fix bugs (via anonymized error logs).

We do not sell or rent personal data, and we do not use customer data to train third-party AI models.

We share the minimum data necessary with the following sub-processors, each bound by their own security and privacy agreements:

• Anthropic, PBC — we send customer messages and relevant order context to the Claude API to generate responses. Anthropic does not retain or train on this data per their API terms.
• Railway Corporation — our backend and database are hosted on Railway (United States).
• Shopify, Inc. — order and customer data is read from your Shopify store via the Admin API.

We do not share data with advertisers, data brokers, or any other third parties.

• Chat transcripts and tickets:retained for the lifetime of the merchant's subscription so merchants can review history. Deleted within 30 days of account cancellation.
• Shopify order/customer data: we do not maintain a long-term copy. We query it on demand via the Shopify API and cache it only for the duration of an active conversation.
• Merchant credentials (OAuth tokens): deleted immediately when a merchant uninstalls the app or upon verified request.
• Shop data after uninstall: fully erased from our systems within 48 hours after Shopify notifies us of an uninstall.

If you are a customer of a merchant using Junymo, you can at any time:

• Request a copy of the personal data Junymo holds about you.
• Request deletion (“right to be forgotten”) of your personal data.
• Ask us what the data is used for and who it has been shared with.

To exercise these rights, email support@junymo.com with the subject line “Data Request” or “Data Deletion” and include the merchant's store name and the email address you used when contacting support.

Junymo also supports Shopify's mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact) — merchants can trigger these from their Shopify admin and we will respond within the required window (30 days for data requests, 10 days for redaction).

• All data in transit is encrypted with TLS 1.2+.
• Shopify OAuth tokens and API keys are stored on an encrypted persistent volume with access restricted to the application runtime.
• Webhooks from Shopify are verified with HMAC-SHA256 signatures to prevent spoofing.
• Merchant dashboard access requires authentication; each merchant can only access their own store's tickets and data.

Junymo is a business tool for Shopify merchants. It is not intended for and we do not knowingly collect personal data from children under 16.

We may update this policy from time to time. Material changes will be announced in the merchant dashboard and via email before they take effect. The “Effective date” at the top of this page always reflects the latest version.

Questions about this policy or your data? Email support@junymo.com. We respond within 2 business days.