Curless Storefront — merchant terms

Between Curless and the merchant who installs this app · last updated 30 September 2026

Installing this app creates an agreement between the merchant and Curless on the terms below. It is the data-processing agreement for the Shopify data the app reads.

What the app is

A view of the installing merchant's Shopify store, exposed to AI assistants over MCP. It reads products, orders and discounts with the scopes the merchant grants at install. It writes nothing to the store, and no money passes through Curless: a checkout is a link to the merchant's own Shopify checkout.

Roles

The merchant is the controller of their customers' personal data. Curless is a processor, acting only on the merchant's instructions — which, for this app, are the tool calls their shoppers make.

What is processed, and what is not

• Order lookup reads one order, matched on an order number AND the email it was placed with. The email is used to match and is never returned.
• No shopper name, address, or phone number is read or returned. Not filtered afterwards — the server never asks Shopify for them.
• No shopper record is written. There is no customer table here to correct, export or delete; a request of that kind goes to the merchant, who holds the order.
• Kept: the merchant's Shopify access token, the product catalogue, and per-call logs that record the tool name, outcome and duration — never the arguments, so never an order number or an email.
• In memory only: shoppers' carts (variants and quantities, gone after two hours unused) and checkout references (up to a day). Neither is tied to a person.

Sub-processors

Amazon Web Services hosts the servers, in Singapore. Shopify itself is the source of the data. There are no others, and nothing is sold, shared for advertising, or used to train models.

Retention and deletion

Uninstalling the app revokes the token and ends the merchant's relationship with Curless; the stored token and catalogue are removed. Shopify's three mandatory compliance webhooks are implemented and answered.

Security

Traffic is served over TLS. The merchant's token is stored with file permissions that admit only the service account, one file per shop. Access to production is limited to the people who operate the service, and every tool call is logged.

Liability and availability

Provided as-is, without warranty of uninterrupted service. The merchant's Shopify store remains the system of record for products, orders and prices; if this app and Shopify disagree, Shopify is correct.

Contact

ops@curless.ai