Data processing note

When you connect a store, ChatFeed processes data on your behalf as your service provider. This note summarizes how.

• What we store: your merchant catalog data (product titles, descriptions, prices, availability, images and links), the generated feed file, store settings, and your API keys and SFTP credentials.
• Purpose: only to build, validate and deliver your product feed and show you its status. We do not use your catalog for any other purpose, sell it, or use it to train models.
• Credentials: encrypted at rest (AES-256-GCM) with a key held only in our hosting environment; decrypted only in memory when a feed is built. We ask for read-only WooCommerce keys and make only GET requests to your store.
• Where: Supabase (database, US region) and Vercel (US hosting).
• Access: each merchant can access only their own stores. Our staff access data only to support you or keep the service secure.
• Deletion: deleting a store removes its keys, settings and feed right away. Deleting your data removes all your stores and account settings.
• Feed links: each feed has a private, unguessable link. Anyone with the link can download that feed. You can replace the link anytime.
• Incidents: if we learn of unauthorized access to your data, we will notify you without undue delay.

Questions: nathan@nathanpetty.com.