Privacy policy — Curless Storefront app for AI assistants

What this connector receives, returns and keeps · last updated 30 September 2026

This privacy policy covers this app for AI assistants: the connector that lets a shopper browse a Shopify store's catalogue, fill a cart and reach the store's own checkout from an assistant such as ChatGPT or Claude. It is operated by Curless. It is installed by a merchant onto their own store, and what happens with THAT shop - the purchase, the payment, the delivery address - is governed by the shop's own privacy policy, published on their storefront.

In short

Personal data collected

• What the shopper types or taps as tool arguments: search words, the product and the options chosen, and quantities.
• To look up one order: its order number and the email address it was placed with.
• What any web server receives: the IP address, the time and the address asked for.

No name, postal address, phone number or payment details are collected, and the rest of the conversation is never sent here.

What it is used for

To show the shop's catalogue and stock, keep the cart, build the link to the shop's own checkout, recognise the order that checkout creates, look up the one order a shopper asks about, and protect the service from abuse with rate limits. Nothing is sold, used for advertising or used to build a profile.

Who receives it

Shopify, the shop's e-commerce platform, for the catalogue, the order lookup and the checkout; the shop, which sees on an order placed through a checkout link the three attributes described below; and Amazon Web Services, which hosts the servers in Singapore. No one else.

How long it is kept

• Carts, with the options chosen: in memory, deleted two hours after last use or on restart. The id that names a cart: up to a day.
• Checkout references: in memory, up to a day.
• An order number and email: not kept - used for the one lookup, then discarded.
• Rate-limit counters: in memory, minutes.
• Web access logs, with IP addresses: 30 days, then deleted.
• Per-call logs - tool, outcome and duration, no arguments: rotated by size and cleared whenever the service is redeployed.

Your choices

A shopper can empty the cart at any time, on the card or by asking the assistant, and what it held is gone with it. Rights over an order - access, correction, deletion - are exercised with the shop you bought from; this connector keeps no shopper record to correct or delete. About the connector itself, write to Curless at ops@curless.ai.

In detail

What reaches this server

Only what a shopper types or taps as tool arguments: a search term, an option value, a product and a quantity for the cart, the checkout reference the card sends back while the shopper pays, or an order number and the email the order was placed with. The rest of the conversation is never sent.

The email is used to match and is never returned. A lookup answers only when the order number and the email both match; a wrong email and an order that does not exist give the same answer, so the tool cannot be used to confirm that an order exists.

What comes back

list_products, get_product and get_checkout_link return catalogue data only — products, options, prices, stock, images — which is personal to nobody.

get_store_policies returns what the shop publishes on its own website — its returns, shipping, privacy and terms policies and its FAQ and contact pages — and takes nothing but an optional topic.

The cart tools — add_to_cart, view_cart and clear_cart — return the cart. These are its fields in full, and the same fields ride beside every answer so the card can show the cart:

• cartId — An unguessable id for this cart, so the storefront card can name it on its own calls
• count — How many items are in the cart
• subtotal — What they cost at today's prices
• checkoutUrl — The Shopify cart link that buys every line that can be bought
• checkoutRef — A random reference for that checkout, described below
• dropped — Products the shop stopped listing, taken out of the cart
• lines — One entry per variant in the cart
• lines.variantId — Shopify's id for the variant
• lines.handle — The product's handle in the shop
• lines.title — Product name
• lines.variantTitle — Variant name - a size, a prescription
• lines.options — The options chosen, each as a name and a value
• lines.spec — The shop's own line of specification for the product, e.g. a pack size
• lines.quantity — How many
• lines.available — Whether the shop can sell it right now
• lines.unitPrice — Price of one
• lines.lineTotal — Price of the line
• lines.imageUrl — Product picture
• lines.url — The product's page on the shop's own site
• promotions — The shop's own automatic offers, for the line under the subtotal - public shop data about the shop, not about the buyer. Only offers for every buyer, active now
• promotions.title — The offer's name, as the merchant wrote it when it reads as words - otherwise the same as its label
• promotions.label — What the offer does, in words made from the shop's Shopify discount settings - "Buy 2, get 1 free · 1 Month"
• promotions.scope — Which items the offer is on, by their collection or product names
• promotions.buyScope — Buy X get Y: which items count towards the buy, when they are not the same
• promotions.combinesWith — Which other kinds of discount it can be used with, as Shopify says
• promotions.combinesWith.orderDiscounts — Whether it combines with order discounts
• promotions.combinesWith.productDiscounts — Whether it combines with product discounts
• promotions.combinesWith.shippingDiscounts — Whether it combines with shipping discounts
• promotions.summary — Shopify's own one-line description of the offer
• promotions.automatic — Always true: it applies at checkout with no code to type
• promotions.percentOff — A percentage off, when the offer is one
• promotions.amountOff — An amount off, when the offer is one
• promotions.minQuantity — The number of items the offer needs, when it needs a number
• promotions.minSubtotal — The spend the offer needs, when it needs one
• promotions.buyQuantity — Buy X get Y: how many items to buy
• promotions.buyAmount — Buy X get Y: or how much to spend
• promotions.getQuantity — Buy X get Y: how many items get the discount
• promotions.getPercentOff — Buy X get Y: the percentage off them, 100 being free
• promotions.getAmountOff — Buy X get Y: or the amount off them
• promotions.endsAt — When the offer ends, when it does

check_checkout_status is asked by the card while the shopper pays, and returns only:

• status — "waiting" until the shop has an order carrying the checkout reference, then "confirmed"; "unknown" for a reference this cart was never given
• order — Present once confirmed
• order.name — The order number the shop gave it
• order.total — The order total
• order.payment — How it was paid, in words - for example Shopify Payments
• order.itemCount — How many items the order holds
• order.financialStatus — Shopify's payment status for the order
• order.lines — What the order holds, line by line (the first four)
• order.lines.title — The product name
• order.lines.spec — The shop's own line of specification for the product, e.g. a pack size
• order.lines.options — The options chosen, each as a name and a value
• order.lines.variantTitle — The variant name
• order.lines.quantity — How many
• order.lines.image — The product picture, through this connector's image proxy where it has one
• order.lines.imageCdn — The same picture at Shopify's CDN
• order.lineCount — How many lines the order has, where that is more than four
• order.shipping — The shipping in the order total, as Shopify gives it
• order.tax — The tax in the order total, as Shopify gives it

Every answer also carries view, merchant, logoUrl, toolNames, vocab — which screen to draw, the shop's name and logo, and this connector's own tool names and words.

lookup_order returns one order, and these are its fields in full:

• name — the order number as the merchant writes it, e.g. #1052
• createdAt — when the order was placed
• currency — the currency it was placed in
• totalMinor — the order total, in minor units
• subtotalMinor — the items in that total, in minor units, as they stand now - after any discount or refund, before shipping and tax
• shippingMinor — the shipping in that total, in minor units, as it stands now - after any refund
• taxMinor — the tax in that total, in minor units, as the order gives it
• financialStatus — Shopify's own word for the payment — PAID, REFUNDED, PARTIALLY_REFUNDED…
• fulfillmentStatus — UNFULFILLED / FULFILLED, or absent when Shopify reports none
• status — the same in the words Shopify's own order page uses for a buyer: Confirmed, On its way, Delivered, Canceled …
• lines — one entry per item, each with the fields below
• title — the product name
• variantTitle — the chosen options, when the product has any
• options — the same options, each as a name and a value, while the variant still exists
• productHandle — the product's handle in the shop, while it exists
• spec — the shop's own line of specification for the product, e.g. a pack size
• quantity — how many were ordered
• currentQuantity — how many there are now - refunded and removed ones left out
• priceMinor — the price of one unit of that line, before any discount, in minor units
• imageUrl — the product image, from Shopify's CDN
• trackingUrls — the carrier's tracking links, once the merchant has shipped and entered them
• statusUrl — Shopify's own status page for this order

No name, no address, no phone number, no email and no payment details are returned — not because they are filtered out afterwards, but because the server never asks Shopify for them.

trackingUrls and statusUrl are links to Shopify and to the carrier. Opening one shows more than this connector does — a status page carries the delivery address — so they are handed over as links for the shopper to open, and their contents never pass through here.

What is kept

• Per-call logs — tool name, outcome, duration. No arguments, so no order numbers and no email addresses. Rotated by size and cleared whenever the service is redeployed.
• Web access logs — including IP addresses, kept for 30 days and then deleted.
• Rate-limit counters — in memory only, discarded within minutes and on restart.
• Carts — which variants and how many, with the options chosen. In memory only, one per conversation, gone after two hours unused or on restart; never written to disk and not tied to a person. The id that names a cart is kept for up to a day.
• Checkout references — one random reference per cart and a new one for each single-item Buy now link, in memory for up to a day, used only to recognise the order Shopify creates from that checkout.
• The merchant's Shopify token — file permissions 0600, on this server only.

No shopper record is written. Nothing is sold, shared for advertising, or used to build a profile, and there is no account to sign in to.

Where it goes

Two hosts, both Shopify's: for the catalogue, the single order lookup, the order a checkout reference points to and the policies the shop publishes on its website, and cdn.shopify.com for product images. A checkout link carries three cart attributes, which Shopify copies onto the order it creates: Source (always Curless), Assistant (which AI assistant, when the client says) and CurlessRef (a random reference). The merchant sees them on the order, and the reference is how the card learns that the order was paid. Nothing is sent to any other third party. Our servers are in Singapore, hosted on Amazon Web Services.

Your rights

Exercise them with the shop you bought from — they hold the order, and this connector holds no shopper record to correct or delete.

About the connector itself, Curless is reachable at ops@curless.ai.

How it works · the shop’s own privacy policy and terms of sale are on their storefront