← saeed-app

Privacy Policy

Effective date: 2026-10-14

saeed-app ("the App") is provided by Saaed Org ("we", "us"). The App helps Shopify merchants answer the emails their customers send to the merchant's support mailbox: it reads incoming emails, classifies them with an AI model, fills reply templates with store data and sends the reply from the merchant's own mailbox, automatically or after the merchant approves it.

This policy explains what personal information the App processes, why, and how it is protected. It applies to merchants who install the App and to the merchant's customers whose emails the App processes on the merchant's behalf.

1. Our role

For the emails and customer data processed for a store, the merchant is the data controller and we act as a data processor (service provider), processing that data only to provide the App's features to that merchant. For the merchant's own account information we are the controller.

2. Information we process

From the merchant's Shopify store

• The store domain and the access token Shopify issues when the App is installed.
• Read-only access to customers, orders, products and the store's legal policies (Shopify scopes read_customers, read_orders, read_products, read_legal_policies). This data is looked up only when needed to answer a specific customer email — for example the status and tracking of the sender's own order. We do not copy the store's customer or order database; only the details used in a reply are kept, as part of that reply.

Mailbox connection

• For IMAP/SMTP mailboxes: server names, ports, username and password (or app password).
• For Google (Gmail / Google Workspace) mailboxes: the email address, name and OAuth tokens issued by Google. We request the https://mail.google.com/ scope because reading and sending mail over IMAP/SMTP requires it.

Emails and replies

• For each incoming email: sender name and address, subject, message text, date and message identifiers; the category, extracted details (such as an order number) and summary produced by the AI; and the reply that was drafted or sent.
• Automated messages (newsletters, notifications, bounces) are recorded as skipped and not answered.

Content the merchant provides

• Reply templates, settings, signature and brand-voice text.
• Files the merchant uploads (for example CSV tables or FAQ text) to be used as a source for replies.

3. How we use information

We use this information only to provide and support the App, namely to:

• read new emails in the mailboxes the merchant connected;
• classify emails and extract the details needed by the merchant's templates;
• look up the store data and uploaded files a template uses;
• draft replies, show them to the merchant for approval, and send them;
• show the merchant a history of processed emails;
• keep the service secure, diagnose errors and respond to support requests.

We do not sell personal information, do not use it for advertising, and do not use it to train or improve AI models.

4. AI processing

Emails are analysed and replies are written by AI models that run on infrastructure we operate. Email content is not sent to third-party AI providers.

5. Google user data

saeed-app's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only to provide the App's user-facing feature: reading the emails customers send to the connected mailbox and replying to them.
• It is not transferred to others except as necessary to provide that feature (such as the AI processing described above), to comply with law, or as part of a merger or acquisition with the user's consent.
• It is not used for advertising and is not sold.
• Humans do not read it, except with the merchant's explicit consent for specific messages (for example when asking for support), for security purposes, or to comply with law.
• It is not used to develop, improve or train generalized AI or machine-learning models.

Merchants can disconnect a Google mailbox in the App at any time and can revoke access at myaccount.google.com/permissions.

6. Sharing and sub-processors

We share information only with service providers that help us run the App:

• Hosting: DigitalOcean (US).
• Shopify, to access the merchant's store data.
• The merchant's own email provider (for example Google or Microsoft), to read and send mail.

We may also disclose information if required by law or to protect the rights and safety of our users.

7. Security

• All traffic to the App is encrypted with TLS (HTTPS).
• Mailbox passwords and OAuth tokens are encrypted at rest (AES-256-GCM) and used only to read and send support email.
• Access to the App's systems is restricted to authorised personnel.

8. Retention and deletion

• Processed emails and replies are kept while the App is installed so the merchant can see their history.
• When the merchant removes a mailbox, its credentials and the emails processed for it are deleted.
• When the App is uninstalled, it stops accessing the store and mailboxes immediately, and all of the store's data is deleted when Shopify sends its data-erasure request (48 hours after uninstalling).
• Requests to delete a specific customer's data, received through Shopify, are carried out promptly.

9. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, or to object to its processing. If you are a customer of a store using the App, please contact that store first; we will assist the merchant with your request. Merchants and customers can also contact us directly at info@intlstaff.com.

10. Children

The App is intended for businesses and is not directed to children under 16.

11. Changes

We may update this policy. The effective date above shows when it last changed; material changes will be communicated to merchants through the App or by email.

12. Contact

Saaed Org
info@intlstaff.com