1. Introduction
Yeer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our supply chain AI platform and services.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email, company details)
- Business data (inventory, supply chain, ERP data)
- Communications with our support team
- Payment and billing information
2.2 Automatically Collected Information
- Usage data and analytics
- Device and browser information
- IP addresses and location data
- Cookies and similar tracking technologies
3. How We Use Your Information
- To provide and improve our AI agents and services
- To personalize your experience and deliver relevant insights
- To communicate with you about updates, features, and support
- To ensure security and prevent fraud
- To comply with legal obligations
4. Your Data Never Trains Our Models
We are committed to protecting your proprietary business data. Your supply chain data, inventory information, and business-specific inputs are never used to train our AI models. Your data remains yours and is only used to provide insights and recommendations specific to your operations.
Our foundation models are trained on publicly available time-series datasets and anonymized industry benchmarks, not on customer-specific data.
5. Shopify Store Data
When you connect your Shopify store to Yeer.ai, we access specific data through Shopify's API to provide our services. We request only the minimum permissions necessary.
5.1 Data We Access from Shopify
- Products: Product titles, descriptions, variants, prices, images, inventory quantities, and vendor information — used for demand forecasting, pricing recommendations, and inventory management
- Orders: Order history, line items, revenue, and discount data — used to generate demand forecasts, customer personas, and sales analytics
- Inventory: Stock levels and location data — used for reorder recommendations and safety stock calculations
5.2 Data We Do NOT Access
- Payment or credit card information
- Customer passwords or authentication credentials
- Customer personal data beyond what is embedded in order records
5.3 How We Handle Shopify Data
- Your Shopify data is stored securely and associated with your store only
- We never share your store data with other merchants or third parties
- Order data is aggregated for forecasting — we do not build individual customer profiles for advertising or marketing purposes
- When you uninstall the app, we delete your store data within 48 hours as required by Shopify's policies
5.4 GDPR Compliance for Shopify Merchants
We comply with Shopify's mandatory GDPR requirements, including the privacy webhooks customers/data_request, customers/redact, and shop/redact:
- Customer Data Request: If a customer of your store requests their data, we will provide any data we hold within 30 days
- Customer Data Erasure: If a customer requests deletion of their data, we will erase it within 30 days
- Shop Data Erasure: When you uninstall the app, all store data is deleted within 48 hours
5.5 Protected Customer Data
Some Shopify data we access — primarily order records — may contain customer personal information that Shopify classifies as Protected Customer Data. For this data, you (the merchant) are the data controller and Yeer.ai acts as your data processor. We handle it in accordance with Shopify's Protected Customer Data requirements:
- Minimization: We request only the scopes and fields needed to provide forecasting, pricing, and inventory features
- Purpose limitation: We use it solely to deliver the app's functionality to your store — never to train AI models, build advertising profiles, or sell to third parties
- Protection: It is encrypted in transit and at rest, access is restricted by role-based controls, and access is logged
- Retention: It is retained only as long as needed to provide the service and deleted per Section 8 and within 48 hours of uninstall
- Incident response: We will report any security incident affecting protected customer data as required by Shopify and applicable law
5.6 Subprocessors
We rely on a limited set of vetted subprocessors to operate the app, each bound by data-protection terms:
- Cloud hosting & infrastructure: to host the application and store your data securely
- AI / large language model providers: to generate insights and recommendations; your store and customer data is not used to train their models
- Analytics & error monitoring: to keep the service reliable and secure
A current list of subprocessors is available on request, and we will take reasonable steps to notify merchants of material changes.
6. Data Sharing and Disclosure
We may share your information only in the following circumstances:
- Service Providers: With trusted third parties who assist in operating our platform (e.g., cloud hosting, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your data
We never sell your personal data or business information to third parties.
7. Data Security
We implement industry-standard security measures to protect your information:
- End-to-end encryption for data in transit and at rest
- SOC 2 Type II certified infrastructure
- Regular security audits and penetration testing
- Role-based access controls and authentication
- Continuous monitoring and incident response protocols
8. Data Retention
We retain your data for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your account and associated data at any time by contacting us at support@yeer.ai.
9. Your Rights
Depending on your location, you may have the following rights:
- Access, update, or delete your personal information
- Object to or restrict certain processing activities
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and GDPR-compliant data processing agreements.
11. Cookies and Tracking
We use cookies and similar technologies to improve your experience. You can control cookie preferences through your browser settings. Categories of cookies we use:
- Essential: Required for platform functionality
- Analytics: To understand usage patterns and improve our services
- Functional: To remember your preferences
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: