Privacy policy

Who publishes the service

Scenaro publishes the conversational AI platform available at scenaro.io and app.scenaro.io, and the connectors that link a merchant catalog to Scenaro, from Shopify or Magento.

Questions about this policy, or requests to exercise your rights: privacy@scenaro.io.

Who this policy covers

It covers website visitors, people who create or administer a Scenaro account, and the merchant teams who install the Shopify app or the Magento module. For these people, Scenaro acts as controller.

What this policy does not cover

When a customer runs a conversational experience for their own users — conversations, voice, session memory, catalog lookups — Scenaro processes that data on the customer's behalf, under their instructions and, where applicable, a data processing agreement.

Those activities are outside this policy. The customer remains responsible for informing their users. A data processing agreement can be requested at privacy@scenaro.io.

Data we process

Depending on the service you use, we process the following categories.

• ·Account — name, email address, company, and role of the people who administer a Scenaro workspace.
• ·Product — scenario configuration, collections, connectors, and catalog fields required to run the experience.
• ·Shopify app — shop name, domain, owner email and name, Admin API access token, and catalog fields (title, description, vendor, type, tags, status, price, inventory, image, product handle). To show the merchant, over 60 days, the conversations, the orders that carry the Scenaro mark placed on the cart, and their revenue, the app reads those orders. For each one: order id, label, amount, currency, conversation id, publication id, Scenaro user id, and the shop customer id when the checkout has an account. That customer id links the checkout to the Scenaro user. The app does not read the buyer's name, email, phone, or address, and it does not request access to customer records or to the shop's full order history.
• ·Magento module — store name, contact email, integration token, and catalog fields (name, description, SKU, price, stock, images, attributes and options). For the same 60-day screen, the module sends the same fields of each marked order: id, label, amount, currency, conversation, publication, Scenaro user, and the shop customer id when the order has an account. That customer id links the order to the Scenaro user. The module does not send the buyer's name, email, phone, or address, and it does not request access to customer records.
• ·Website — technical data and cookies described on the Cookies page.
• ·Messages — emails sent to hello@scenaro.io or privacy@scenaro.io.

Why

We use this data to:

• ·Provide the account, scenarios, and catalog connection.
• ·Authenticate the Shopify app or the Magento module, and read or update the product fields you authorized.
• ·Show the merchant, over 60 days, the conversations, the orders that carry the cart mark, and their revenue.
• ·Secure the service and diagnose incidents.
• ·Measure the website audience, only if you consent.
• ·Answer your requests.

Legal bases

Contract performance covers the account and the service. Legitimate interest covers security and operation. Consent covers non-essential cookies. A legal obligation applies where the law requires it.

Recipients

Hosting and infrastructure run on Amazon Web Services, mainly in the European Union (Paris). Website measurement tools (Umami, Google) load only with your consent. Other providers are involved only when they are required to operate the service.

We do not sell your data.

Retention

The account and its configuration are kept for the life of the account, then deleted or anonymized within a reasonable time after closure, unless a retention duty applies.

The marked-order screen shows only the last 60 days. The rows stay for the life of the shop connection.

The Shopify token and catalog connection are deleted when the app is uninstalled and when Shopify sends a shop deletion request. Marked orders for that shop go with the connector. A request about a single buyer goes to privacy@scenaro.io.

The Magento token stops working when the integration is revoked in Magento or the module is removed. The Scenaro catalog connection and the marked orders are deleted on request at privacy@scenaro.io. Cookies follow the periods on the Cookies page.

Your rights

You can request access, rectification, erasure, restriction, objection, and portability, and you can withdraw cookie consent. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Write to privacy@scenaro.io. We may ask you to confirm your identity before we respond.

Transfers

The main processing takes place in the European Union. If a provider is located outside the European Union, the transfer relies on an adequacy decision or on standard contractual clauses.

Shopify app

The app is free to install. It reads the catalog and can update the product fields covered by the permission you grant. It reads marked orders for the 60-day screen described above. That read uses the read_orders permission. It does not request read_customers or read_all_orders.

Uninstalling removes the Shopify connector and its credentials. The related Scenaro workspace is not deleted automatically: you can ask for that deletion at privacy@scenaro.io.

Magento module

The module is free to install. It reads the store catalog (schema, search, product page) through an integration token created in Magento. The Content > Scenaro screen reads marked orders, for the same 60-day screen, with the Sales resource. It does not request the Customers resource.

Removing the module or revoking the integration cuts off catalog access. The related Scenaro workspace is not deleted automatically: you can ask for that deletion at privacy@scenaro.io.

Updates

The current version is the one published on this page. The date at the top is the latest update.