Privacy Policy

Antigency is operated by Antigency Inc. (referred to in this policy as “Antigency,” “we,” “our,” or “us”).

Privacy inquiries: support@antigency.ai.

Mailing address: On file with registered agent.

From the merchant directly. Account email, name, business name, payment method (handled by our payment processor — we never see card numbers), subscription tier selection, and any voice or configuration preferences you provide.

From the merchant’s Shopify store (with your OAuth permission). Products, orders (including order totals, line items, and attribution data such as UTM parameters and ad click identifiers), customer order summaries (the Shopify customer id, order count, amount spent, and created and last-updated dates), and blog and page content — plus, only if you grant the optional permissions, theme files, inventory levels, and locations. The exact permissions requested are listed on the install screen.

From connected integrations (with your OAuth permission). Google Analytics 4 traffic data, Google Search Console query data, Google Ads campaign and account data, Klaviyo flow and list data, Meta Ads campaign data, Google Merchant Center feed data, Judge.me product reviews, Klaviyo email replies (with contact details removed).

From Slack. If your team uses Anti in Slack, we store the identifiers Slack returns when we set up your private channel (workspace, channel, and user identifiers) and the email address used to invite your team. We send Slack the content we deliver to you there — the morning brief, findings, decision summaries, approval prompts (with their buttons), and the chart images that accompany them. We also receive what your team sends there — messages and Approve/Reject clicks — which we process with our AI model providers and treat as your instructions. The channel is created in Antigency’s own Slack workspace and your team joins it through Slack Connect; your own workspace may keep its copy under your Slack settings. Your Antigency dashboard remains the authoritative record.

Automatically. IP address, user agent, page views on antigency.ai, and dashboard interactions, recorded server-side for security and product analytics.

Error monitoring and session replay. We use Sentry (United States) for error monitoring, performance tracing, and session replay of the dashboard. Session replay records on 1% of sessions and 100% of error sessions, with the SDK’s defaults: all text and media are masked and inputs are masked. A scrubber removes known personal-data fields before anything is sent.

From external agents (MCP). When the Antigency MCP server is available, calling-agent metadata such as call ID, rationale, context payload, and originating IP. The MCP server is post-launch; this section is forward-looking.

To operate the service: read your data, run audits and, where you approve a supported change, apply that change, and write results back to your account.

To improve the service: aggregate and de-identified analysis of system performance and per-merchant outcome refinement.

To bill the service: tier enforcement and quota tracking.

For security and fraud prevention: anomaly detection, abuse investigation, and audit logging.

For support: when you contact us, we use your data to help resolve your issue.

We do not sell merchant data.

We do not use merchant data to train external large language models.

We do not share merchant data across merchants. Tenant isolation is enforced at the database row level.

Active merchant data: retained while your account is active.

Inactive merchant data: deleted when you uninstall the app (through Shopify’s app-uninstall / shop redact process) or when you request deletion. While the app stays installed, your data is retained so you can reactivate.

Per-merchant agent memory: retained while the app is installed and your subscription is active. It is deleted when you uninstall the app or when you request deletion. Agent working state on the merchant’s private container — session and transcript history and similar working files — is destroyed with the container when the app is uninstalled, except for scheduled backups (see “Backups” below). A request to erase a single end customer removes that customer’s references from our database and, when the container-local purge runs, from that container’s working state as well.

Privacy-request identifiers: held encrypted only while a Shopify customer data request or deletion is processed, and deleted within about 72 hours. A keyed, non-reversible hash is kept as the record that the request was honoured.

Audit logs: retained for 1 year minimum; governance-relevant logs retained longer.

Backups: we run a scheduled backup of agent working state every six hours while the container is running. Each backup is written to a private storage bucket and kept until we delete it — there is no automatic expiry. A backup can contain data that a later deletion removed, and it is not destroyed when the app is uninstalled.

We use the following sub-processors to operate the service:

• Vercel — hosting and serverless compute
• Supabase — database, authentication, and file storage
• Fly.io — hosting for the per-merchant agent containers
• Stripe — payment processing and subscription billing
• Inngest — background job orchestration
• Shopify — commerce platform integration and merchant billing
• Resend — transactional email delivery
• Upstash — rate limiting and caching
• Sentry — error monitoring and session replay for the dashboard — United States
• Third-party AI model providers — large language model inference used to analyse the data you connect and to draft content. We select these providers and may change them as the service evolves.

A current list of sub-processors, grouped by category with their purpose and processing locations, is maintained at /legal/sub-processors.

Recipients. We also share data with the following recipient that is not a sub-processor:

• Slack — Slack Connect messaging: delivering briefs, findings, decision summaries, approval prompts, and chart images to private channels in Antigency’s Slack workspace, and receiving your team’s messages and approval actions there — United States and other countries where Slack operates

Slack is a recipient of this messaging, not a sub-processor, and is not engaged under a processor agreement.

Legal compliance. We share data when required by law, court order, or valid regulatory request.

Your explicit consent. When you connect an integration, that integration’s data flows back through our infrastructure under your authorization.

We do not sell, rent, or monetize merchant data through advertising or data brokerage of any kind.

Parts of the platform — currently the content drafting workflows that produce blog articles and product descriptions — use third-party AI model providers to analyse the data you connect and to draft written content. Once you connect an integration, the service sends the data read from it, and related account context, to those AI model providers as part of the service. How a provider handles that data is governed by its own terms. All such content is presented to you for review and approval before any publication action is taken on your behalf.

Data sent to AI model providers may be processed in the United States and other countries where those providers operate. We do not sell or rent merchant data. A current list of sub-processors, by category, is maintained at /legal/sub-processors.

Antigency operates across multiple data platforms you connect (e.g. Shopify, Meta Ads, Google Ads, Klaviyo). To power agents that depend on signals from more than one platform — for example matching ad spend to revenue, or matching email campaign performance to revenue — we correlate data across the platforms you’ve connected. This correlation is performed inside your account only. We do not aggregate data across customers, do not sell data, and do not share data with third parties beyond what is necessary to fulfill the agent’s stated function (e.g. an LLM call for content generation, see “AI-generated content” above). You can disconnect a platform at any time, which immediately revokes our access to its data.

Primary infrastructure is hosted in the United States (Vercel and Supabase US regions).

Some sub-processors operate globally. Where applicable, we rely on their published compliance posture (SOC 2, ISO 27001, and equivalent frameworks).

For merchants in the European Union, United Kingdom, and other regions with cross-border transfer requirements, our Data Processing Agreement at /legal/dpa covers the required terms, including Standard Contractual Clauses.

Right to access. You may request a full export of your data by emailing us.

Right to deletion. Uninstalling the app deletes your store’s data through Shopify’s app-uninstall / shop redact process. Messages already delivered to Slack remain there until you or we delete them. You may also request deletion at any time and we will erase your data.

Right to portability. Data exports are provided in JSON and CSV formats.

Right to object. You may opt out of any processing that is not strictly required for service delivery.

Right to lodge a complaint. You may contact your local data protection authority.

For California residents. CCPA-specific rights apply, including the right to know what personal information is collected and the right to request deletion. We do not sell personal information.

For European Union residents. GDPR Articles 15 through 22 apply, including access, rectification, erasure, portability, restriction, and objection.

The marketing site at antigency.ai uses privacy-respecting analytics that do not set cookies for cross-site tracking.

The dashboard uses authentication cookies, which are required to keep you signed in.

We do not use third-party advertising cookies, social pixels, or tag managers on our properties.

Antigency is built for businesses, not children. We do not knowingly collect personal data from anyone under the minimum age set by applicable law in the merchant’s jurisdiction (commonly 13 or 16). If you believe a minor has provided us with data, contact us and we will delete it.

Material changes will be notified by email and dashboard banner at least 30 days in advance. Non-material changes will be notified by dashboard banner. The effective date at the top of this page is updated with each version, and prior versions are archived on request.

Privacy inquiries: support@antigency.ai.

DPA requests: same address. Our Data Processing Agreement is available at /legal/dpa; enterprise customers can request a standalone countersigned copy from support@antigency.ai.

Data deletion requests: same address. We honor them within 30 days or as required by applicable law.