Privacy Policy
Privacy Policy
Last Updated: May 15, 2026
Introduction
At Parbat, we respect your privacy and are committed to protecting your personal and business information. This Privacy Policy explains what information the Parbat application ("Parbat", "we", "us") collects, how we use and protect it, and the choices available to you.
This policy applies to the Parbat app installed from the Shopify App Store and to our related services.
Who This Policy Covers
Parbat is a pricing-optimization app used by e-commerce merchants. This policy describes:
Merchant data — information about the merchants who install and use Parbat, and their Shopify store.
Store customer data — limited information relating to a merchant's own customers, accessed through the Shopify APIs.
Where Parbat processes a merchant's store data, the merchant is the data controller and Parbat acts as a data processor on the merchant's behalf.
Information We Collect
Merchant account information. Name, email address, and account credentials needed to authenticate and operate the app, including Shopify session tokens and authentication identifiers.
Shopify store data. Product, collection, inventory, and location data; and store configuration such as theme, pages, policies, and navigation. This data is used to generate pricing analysis and to build simulation environments (see "Store Simulation Sandbox" below).
Order data. We read order history to compute aggregate demand and revenue signals (such as units sold, gross merchandise value, average order value, refund rate, and the share of new versus returning buyers). The order records we store contain economic fields and a coarse region (country and province/state) only.
Customer information. Parbat is designed to minimize the customer data it handles. We do not collect or store the names, email addresses, phone numbers, or street addresses of a merchant's customers. From customer-related data we retain only:
an aggregate count of a store's customers; and
storefront behavioral events (such as product views, add-to-cart, and checkout events) collected by our web pixel and used as demand signal for pricing analysis.
Interaction data. Data generated by your use of the platform, including queries made through our conversational AI assistant and outputs produced during pricing simulations.
How We Use Your Information
We use the information we collect solely to:
Provide, operate, secure, and improve the Parbat platform;
Deliver AI-driven pricing insights, recommendations, simulations, and analytics;
Authenticate users and maintain the security of accounts and data; and
Communicate with you about the service, including support and important updates.
We do not use this information for advertising, and we do not sell it.
Shopify Protected Customer Data
Parbat accesses a limited set of Shopify protected customer data — order information, an aggregate customer count, and storefront behavioral events — strictly to provide the app's pricing-analysis features. We follow the principle of data minimization: we request only the access scopes the app's functionality requires, and we do not retain customer identity fields (name, email, phone, address).
We honor Shopify's mandatory compliance (GDPR) webhooks:
Customer data request — we make available the data we hold that is associated with the identified customer.
Customer redaction — we remove the link between our stored records and the identified customer.
Shop redaction — we permanently delete the store's data.
Store Simulation Sandbox
To produce reliable pricing simulations, Parbat may create a private, Parbat-controlled sandbox copy of a merchant's store, including its catalog and store configuration (theme, pages, policies, and navigation). These sandboxes are used only to run pricing simulations for that merchant, are not publicly accessible, and are deleted in line with the retention practices described below.
How We Share Information
Parbat does not sell your information. We share data only with trusted infrastructure and service providers that help us operate the platform, and only to the extent needed to provide the service:
Cloud infrastructure — our application and data are hosted on Google Cloud Platform, including Firebase/Firestore, Cloud SQL, Cloud Storage, Pub/Sub, and Cloud Tasks.
AI/ML providers — we use Google (Gemini, via Vertex AI) and Anthropic (Claude) to generate pricing insights and recommendations and to power the conversational assistant. We send these providers the inputs needed to produce a result. These providers do not use your data to train their models.
We may also disclose information where required by law or to protect the rights, safety, or security of Parbat, our users, or the public.
Data Storage and Security
We implement industry-standard security practices, including encryption of data in transit (TLS) and at rest, secure authentication, and access controls that limit data access to authorized personnel. While no system can be guaranteed completely secure, we work continuously to protect your data and minimize risk.
Data Retention
We retain data only as long as necessary to provide the service, comply with legal obligations, or resolve disputes.
While installed — store and account data is retained for as long as the app is installed and in use.
On uninstall — when you uninstall Parbat, we begin deletion of your store's data and permanently delete it within 48 hours, consistent with Shopify's shop-redaction process.
Simulation sandboxes — sandbox copies are removed when no longer needed for active simulations, and when a store's data is deleted.
Compliance requests — we process Shopify customer redaction and shop redaction requests as described above.
Your Data Rights
We believe in empowering users to manage their data. Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal information. You can exercise these rights within the platform or by contacting us.
If you are a customer of a store that uses Parbat, please direct data requests to that merchant, who is the controller of your data; we will assist the merchant in responding.
Merchant Responsibilities
Merchants who use Parbat are responsible for maintaining their own privacy policy and for obtaining any consents required from their customers for the collection of storefront behavioral data.
International Data Transfers
Parbat is operated using cloud infrastructure that may process and store data in data centers located outside your country. Where data is transferred internationally, we take steps to ensure it remains protected in accordance with this policy and applicable law.
Children's Privacy
Parbat is a business tool intended for use by merchants and is not directed to children. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you through the app or by other means.
Contact Us
If you have questions about this policy or our data practices, please contact us at privacy@parbat.ai. Transparency is integral to our approach, and our team is ready to address your inquiries promptly.
