Privacy policy
Last updated: October 25, 2026
GrowthAgent is provided by Pcnaid Inc., 752 N Main St #2194, Mansfield, Texas 76063, United States. Questions can be sent to support@pcnaid.com.
Data we process
GrowthAgent stores shop configuration, encrypted Shopify credentials, subscription state, and merchant settings such as brand voice, guardrails, handoff destinations, and an optional encrypted OpenAI API key.
Storefront conversations store a session identifier, a hash of the cart token when supplied, the landing-page URL, campaign parameters, messages, tool results, usage metadata, and sentiment or handoff indicators.
Handoff tickets store the reason, summary, shopper contact when supplied, priority, and destination.
Order attribution links a matching hashed cart token to a conversation and records the order identifier, amount, and currency.
How we use and share information
The assistant sends the shopper message, locale, page URL, retrieved store knowledge, and selected storefront tool results to OpenAI to plan and generate a reply.
Configured handoffs send a conversation summary to the merchant-selected email, webhook, SMS, or fax destination, using Resend for email, Twilio for SMS, and Sinch for fax.
Optional Algolia indexing receives store-knowledge titles, text, URLs, and metadata; optional ElevenLabs speech receives the assistant message selected for playback.
Operational telemetry uses Sentry for errors and, when configured, PostHog and Datadog for event and diagnostic information.
Storage and security
Application records use PostgreSQL through Cloudflare Hyperdrive with tenant-scoped transactions, and privacy exports use Cloudflare R2.
Shopify credentials and the saved merchant OpenAI key are encrypted before storage.
Retention and deletion
Customer data requests create exports and email the merchant a signed download link; exports expire after seven days and expired downloads are denied.
Customer redaction removes matching conversations, messages, handoff tickets, attribution and associated usage records, customer-linked audit entries, and privacy exports, using the customer identifier or attributed orders to locate records.
Shop redaction requires confirmation that the installation is no longer active and removes shop conversations, knowledge, handoffs, attribution, usage, exports, and the shop record, while retaining selected privacy and cleanup evidence.
The cleanup workflow retries failed export-object deletions, and shop redaction also attempts deletion of the configured Algolia index.
Contact
Send privacy questions to support@pcnaid.com.