Privacy Policy

Privacy, in plain words.

What we collect, how Concierge remembers shoppers, what stores can see, and the choices you have.

Last updated October 16, 2026

In short

  • We collect what we need to run Concierge and our websites, and nothing to sell. We never sell personal information.
  • Concierge remembers a shopper only what they say about themselves, never sensitive details, and shoppers can ask it to forget at any time.
  • What you share with Concierge is held by us, for you. Stores never see your conversations or saved preferences; what they see is what shoppers asked for, in categories and counts, never who asked.
  • A store’s catalogue and business data are used to serve that store’s shoppers, and nobody else’s.
  • We don’t let the AI providers we use train their own models on your information.

1. Who we are and what this covers

HawkShift builds Concierge, an AI shopping agent that businesses add to their online stores, on platforms such as Shopify, WooCommerce, Magento, Wix and Squarespace, or through our API. We also run hawkshift.com, including this website, our developer documentation and HawkShift Shop, our own product comparison site.

This policy explains what personal information we collect, why, who we share it with and the choices you have. It applies to three groups of people:

  • Businesses that use Concierge on their stores, and the people who work for them.
  • Shoppers who talk to Concierge on a store that uses it.
  • Visitors to hawkshift.com, including HawkShift Shop.

“HawkShift”, “we” and “us” mean the business that operates hawkshift.com, based in Iowa, United States.

2. Our role on a store

When you shop on a store that uses Concierge, that store is the business you are dealing with. It sells you the products, takes your payment and handles your order, and its own privacy policy covers what it does with your information.

We provide Concierge to the store as a service. When Concierge works with the store’s own records, for example reading your orders from the store to answer a question about them, we act on the store’s behalf under our Data Processing Agreement with the store.

What you share with Concierge is held by us, for you. That means your conversations, the preferences Concierge remembers, the prices and stock it watches for you and the alerts it sends, and the record of what it did for you. The store cannot read or export any of it, including by sending us a request about you. It only gets insight combined across many shoppers (section 6). Section 5 explains how memory works, and section 11 how to get a copy or delete it.

3. Information we process

Some information we store, so Concierge works and keeps getting better. Other information Concierge only looks at for a moment, to answer a question, and doesn’t keep. We say which is which below.

From businesses

StoredAccount details: names, work email addresses and what you tell us when you contact us, book a call or sign up. If you open Concierge inside your Shopify admin, Shopify tells us the staff member’s name and email so we can sign them in.
A copy of your catalogue (products, variants, details, prices and stock), and the search index built from it on our own search servers, kept in sync so Concierge can search it quickly.
Your store’s policies (read from your platform, for example Shopify’s refund and shipping policies), public store pages such as FAQs, and the business knowledge your team writes in the dashboard.
Your Concierge settings, such as its look and which features are on, and usage counts for your plan.
Plan and billing status. On Shopify, charges are billed by Shopify and we never see card details; elsewhere, card details stay with our payment processor.
Accessed when needed, not storedLive prices and stock, checked at the moment Concierge answers.
A signed-in shopper’s own orders, on platforms such as Shopify and only if you allow it. Concierge reads them from your store when that shopper asks, for example “where is my order?”, and uses them for that answer. We don’t copy your orders or your customer list into our database, and Concierge can only ever read the orders of the shopper who is asking.

From shoppers using Concierge

What we store about you is held by us for you, and the store you’re shopping on can’t see it (section 2).

StoredYour conversation: the messages you send and Concierge’s replies.
What you do with results: products you view, save, compare or add to your cart through Concierge.
Things you ask Concierge to do, such as watching a product’s price or stock.
Preferences you share about yourself, if Concierge saves them to help you next time (section 5).
Technical information: an identifier for your browser, the store you’re on, your device and browser type, and basic logs we need to keep the service running and secure.
If you’re signed in to the store, a reference to your account there, so Concierge can recognise you. We never receive your password.
Accessed when needed, not storedPhotos you share to find products. Concierge looks at a photo to find similar products, and we don’t save the photo on our servers. We may keep a short written description of it with the conversation, so Concierge can refer back to it.
Your orders at that store, when you ask about them, as described above.

From visitors to hawkshift.com

StoredSign-in details, if you create an account on HawkShift Shop: your email address and, if you sign in with Google, your name and profile picture from Google.
Price alerts: the email address and products you choose.
Usage information: pages visited, searches and clicks, used to understand and improve the site.
Messages you send us.

4. How we use it

To run ConciergeUnderstanding what a shopper asks, finding the right products in the store’s catalogue, checking live prices and stock, and answering.
To remember, with careUsing the preferences a shopper shared to give better answers on later visits.
To do what was askedCarrying out tasks a shopper requested, like watching a price, and telling them when something changes.
To give stores insightShowing a store what its shoppers look for and where they get stuck, combined across groups (section 6).
To help AI agents get the store rightWhen a store turns on Concierge’s features for AI agents, Concierge shares product facts and store answers with the AI channels and agents that ask about that store. It never shares a shopper’s conversations, memory or identity this way.
To keep it safe and workingPreventing abuse, fixing problems, securing accounts and meeting our legal obligations.
To improve ConciergeStudying how conversations go so Concierge gets more accurate and more helpful. This stays inside HawkShift: we don’t let the AI providers we use train their own models on your information.
To talk to youAnswering your messages, and sending the alerts, service notices and updates you signed up for.

We do not sell personal information, and we don’t share it with anyone for their own advertising. We don’t use one store’s data to help another store sell.

Where the law asks us to name a legal basis, we rely on providing the service you or your store asked for, our legitimate interest in running a safe and useful service, your consent where we ask for it, and legal obligations.

5. How Concierge remembers shoppers

Concierge can remember things you tell it, so you don’t have to repeat yourself. We built that memory with firm limits.

  • Only what you say about yourself. Concierge saves things like “I prefer quiet appliances” or “my living room is small”, in its own words, so they still make sense later. It doesn’t build a profile from guesses about you.
  • Never sensitive information. Concierge will not save health or medical details, payment or bank details, passwords, government ID numbers, your precise location, religion, political views, sexual orientation or biometric data, even if you ask it to. It can use what you said to help you in that conversation, then lets it go.
  • You stay in control. Ask Concierge what it remembers about you, and ask it to change or forget anything. You can download or delete everything from “Your data” in Concierge’s menu, or email us.
  • Stores don’t see it. The store you’re shopping on never sees your saved preferences. Only Concierge uses them, and only to help you.
  • It stays on each store unless you allow it. Memory from one store is only used on another store if you say yes for that store. Things about other people in your household, and your dealings with a particular store (like an order or a return), never move between stores.

If you aren’t signed in to the store, your memory is tied to your browser by a cookie. Clearing your cookies starts you fresh. If you are signed in, it is tied to your account with that store, so it follows you across your devices there. We delete memory tied only to a browser after 180 days without use.

6. What stores see

Stores that use Concierge get insight into what their shoppers are looking for: the products people ask about, what they can’t find, and why they hesitate. We build that insight to protect individual shoppers:

  • Insights show what shoppers asked for, in categories and counts, never who asked. No shopper’s words, conversations, contact details or individual profiles are ever shown.
  • When only a few shoppers are behind a pattern, it is shown only if it’s described in everyday shopping terms, isn’t about a sensitive topic like health, and can’t be combined with other patterns into a picture of one person.
  • Insights never include your conversations or saved preferences, and a store can’t look up what any one shopper said, watched or did with Concierge.
  • A store only ever sees insights about its own shoppers.
  • If you ask Concierge to pass a message to a store’s team, it drafts one for you to review. Only if you press Send does the store receive it: exactly that message and the email address you enter, so they can reply. Nothing else from your conversation is sent. If the store replies in the chat, we keep the messages between you and the store only while that chat is open, and delete them a day after it closes.

7. Who we share it with

We share personal information only as this policy describes:

  • The store you’re shopping on, as described in sections 2 and 6.
  • Service providers who help us run HawkShift, under contracts that limit what they can do with it. They include:
AI providersConcierge runs on HawkShift AI, our own AI system. To do its work, HawkShift AI may also use AI services from other providers, in addition to our own or as a backup when one is unavailable. They process information only to return results to us, and may not use it to train their own models.
Hosting and storageThe cloud services that run our website, our search servers and our databases.
Web searchWhen Concierge researches the web for a shopper, the search question is sent to a web search service. Nothing that identifies the shopper is sent with it.
EmailSending emails, such as sign-in links and alerts.
Sign-inServices such as Google, if you choose to sign in with them.
Store platformsPlatforms such as Shopify, WooCommerce, Magento, Wix and Squarespace, to connect Concierge to stores built on them.
PaymentsProcessing payments from businesses, when paid plans are in place.
  • Legal reasons: when the law requires it, or to protect the rights, safety and security of our users, the public or HawkShift.
  • Business changes: if HawkShift is sold or merged, personal information may transfer as part of that, and this policy will continue to protect it.

Our service providers may only use personal information to provide their services to us. A business can ask us for the current list of providers that process its shoppers’ information.

8. Cookies and browser storage

We keep this to what the service needs. We don’t use advertising cookies.

  • Concierge memory: a signed cookie that lets Concierge recognise your browser, so it can remember your preferences between visits. The cookie expires after 400 days, but the memory behind it is deleted sooner, after 180 days without use (section 9).
  • Sign-in: cookies that keep you signed in to your HawkShift account.
  • Settings: small values stored in your browser, like whether you picked light or dark mode.

You can clear or block cookies in your browser settings. Concierge will still work, but it won’t remember you between visits.

9. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy:

  • Saved preferences are kept until you ask Concierge to forget them, or ask us to delete them. Memory tied only to a browser is deleted after 180 days without use.
  • Conversations are kept while they are useful for running and improving the service, and then deleted.
  • Business account and store data are kept while the business uses Concierge. When it stops, we delete store data within 30 days, or return it first if the business asks, except what we must keep by law.
  • Stores on Shopify: when a store uninstalls Concierge, we disconnect it straight away, and when Shopify asks us to erase the store’s data (shop/redact), we delete what we hold for that store and its shoppers. We answer Shopify’s customer data requests and customer erasure requests as section 11 describes.
  • Price alerts are kept until you remove them.
  • Order changes (if the store allows them): a new address you typed is removed after 30 days, the email you enter to check a guest order after 24 hours, and a photo you send with a refund claim after 90 days.

10. How we protect it

We use encrypted connections, access controls and separation between stores, so one store’s data can’t be reached from another’s. Concierge’s access to a store is limited to what that store granted, and every action Concierge takes is recorded. No system is perfectly secure, and if we learn of a breach that affects you, we will tell you as the law requires.

11. Your choices and rights

Wherever you live, you can ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct it;
  • delete it;
  • stop using it for a particular purpose.

Depending on where you live, such as California or the European Economic Area and the UK, the law may give you further rights, including the right to complain to your local data protection authority. We will not treat you differently for using any of these rights.

The quickest way to manage what Concierge remembers is to ask it. To download or delete what Concierge holds for you on a store, including your conversations, open Concierge on that store, tap the menu, then “Your data”. Use the same browser you chatted in, or sign in to your account with the store first. You can also email hello@hawkshift.com with the subject “Privacy request” to get a copy of everything or delete it. We may need to confirm your identity first, and we reply within 30 days.

If you ask the store instead, it will point you to us, because stores can’t access what Concierge holds for you. If your request is about a store’s own records, such as your orders or your account there, we’ll point you to that store, because it controls them. If a store deletes your account and tells us, we delete everything Concierge held for you on that store.

12. Children

Our services are not meant for children under 13, and we don’t knowingly collect their personal information. If you think a child has given us information, contact us and we will delete it.

13. Where we process it

HawkShift is based in the United States, and our service providers mostly process data there. If you use our services from elsewhere, your information will be transferred to the United States, and we protect it as this policy describes.

14. Changes and contact

We update this policy as HawkShift grows. When we make an important change, we will update the date at the top and, where appropriate, tell businesses and account holders directly.

Questions about privacy? Email hello@hawkshift.com, or see our contact page.