Legal
Privacy Policy
Effective June 5, 2026
AgentFriendly (“AgentFriendly,” “we,” “us”) operates the public directory at agentfriendly.shop and the AgentFriendly Shopify app installed by participating merchants. This policy explains what we collect, why, who we share it with, and the choices you have. Questions? Email hello@agentfriendly.shop.
Who this applies to
AgentFriendly serves three groups, and we collect different data from each:
- Agent owners — people who register an AI shopping agent and receive an Agent ID.
- Merchants — Shopify store owners who install our app to offer an agent discount and appear in the directory.
- Visitors — anyone (human or agent) who browses the directory.
What we collect
From agent owners, when you register. Your full name and email (required), and optionally a mobile number, a separate agent email, and a shipping address. We generate an opaque Agent ID for you. We do not collect or store payment-card data.
Agent purchase activity. When an agent uses its Agent ID to check out at a participating store, we record the purchase to credit rewards points and show the merchant that the agent channel drove an order. This is limited to the store, the order total, points earned, and the shipping state/region and country (for aggregate geography). We do not receive your card details, and we request only the order data needed to apply the discount and credit points.
From merchants, via the Shopify app. Your store domain and name, the agent discount settings you choose, and your directory listing text (a short blurb and category). To operate the embedded app, Shopify provides us an authentication session and access token scoped to the permissions you granted (currently the ability to manage the agent discount).
Directory and visit analytics. When a store is visited through the directory or through the AgentFriendly storefront pixel, we log the store visited, the source (directory or pixel), an approximate location (state/region and country), and the Agent ID if one is present. We use this to give merchants visit/visit-source analytics.
Standard server logs. Like most websites, our hosting provider records standard request data (IP address, user agent, timestamps) for security and reliability.
How we use it
- Operate the public directory and the machine-readable store feed agents use.
- Apply the merchant's agent discount at checkout and credit rewards points.
- Show merchants analytics on agent visits, purchases, revenue, and geography.
- Run, secure, debug, and improve the service.
- Respond to your requests and, where you've asked, contact you about your account.
We do not sell your personal information, and we do not use it for third-party advertising.
What's public
A participating store's directory listing is public by design: the store name, domain, agent discount percentage, blurb, category, and founding-member status appear on agentfriendly.shop and in our machine-readable feed so agents can discover it. Agent-owner personal details and individual purchase records are never public.
Who we share it with
We share data with a small set of service providers (“subprocessors”) that help us run AgentFriendly, under contracts that limit their use of it:
- Supabase — our database (stores agent, merchant, and transaction records).
- Vercel — hosting for the website and the app server.
- Shopify— the platform our merchant app runs inside; merchant and order data is processed in accordance with Shopify's terms.
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger or acquisition (with notice where required).
Shopify merchant data & GDPR webhooks
For merchants, we honor Shopify's mandatory privacy webhooks. On a data-request webhook we review what we hold for the shop; on a customer-redaction webhook we act on it (AgentFriendly does not store a merchant's individual customers' personal data); and on a shop-redactionwebhook (sent after you uninstall) we delete the shop's settings and remove its directory listing.
Data retention
We keep your data while your account or store is active and as needed to provide the service. When you uninstall the app we remove your store from the directory; when you ask us to delete your agent account we remove your personal details. We may retain limited records as required for legal, security, or accounting purposes.
Your rights & choices
Depending on where you live (including under GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any of these, email hello@agentfriendly.shop and we'll respond within the time required by applicable law. You can review the purchases attributed to your Agent ID anytime on your dashboard.
Cookies
The public directory uses only what's essential to serve pages; it does not run third-party advertising or cross-site tracking cookies. The embedded Shopify app uses the session cookies Shopify requires to keep you securely signed in while you use it.
International transfers & security
Our providers process data in the United States. We use industry-standard measures — encryption in transit, access controls, and database row-level security — to protect your information. No method of transmission or storage is perfectly secure, but we work to keep your data safe and to notify you of incidents where required.
Children
AgentFriendly is for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.
Changes to this policy
We may update this policy as the service evolves. When we make material changes we'll revise the effective date above and, where appropriate, notify you.
Contact
AgentFriendly · hello@agentfriendly.shop
▪ This policy describes AgentFriendly's current practices. Continued use of the service means you agree to it.