Outdoors Demo Store Privacy and AI Compliance Policy

Effective date: 2026-08-22

This policy applies to the Outdoors Demo Store at outdoors.getpsai.com and explains how we process personal data when you use the website, shop for products, and interact with the AI shopping assistant.

This document is provided for operational transparency and compliance planning. It is not legal advice.

1. Who We Are

Data controller: Outdoors Demo Store Website: outdoors.getpsai.com Privacy contact: privacy@outdoors.getpsai.com

If you are implementing this policy on a live production store, replace contact details with your official legal and support contacts.

2. Scope

This policy covers:

  • Website browsing and storefront interactions
  • WooCommerce shopping and checkout activity
  • AI shopping assistant interactions powered by Personal Shopper AI
  • Store analytics related to AI-assisted shopping

This policy does not replace WooCommerce, payment processor, or shipping carrier privacy terms; those services may have separate notices.

3. Data We Collect

We may collect and process the following categories of data:

  • Identity and account data: name, billing/shipping details, email, phone, account credentials (if account creation is enabled)
  • Transaction data: products viewed, cart events, orders, payments status, refunds
  • Device and technical data: IP address, browser type, device characteristics, timestamp, REST security token metadata
  • AI interaction data: shopper prompts, assistant responses, relevant catalog context used to generate responses
  • Local assistant/session data: browser session identifiers and chat UI state stored in browser storage
  • Analytics data: AI-attributed cart additions, session counts, chat turns, conversion events, attributed revenue metrics

We do not intentionally request sensitive personal data in the AI assistant. Please do not enter medical, financial account, government ID, or other sensitive personal information into the chat.

4. How We Use Data

We use personal data to:

  • Provide the storefront, checkout, and order fulfillment
  • Generate AI shopping recommendations and interactive product cards
  • Maintain cart/session continuity and improve shopping UX
  • Prevent abuse, enforce rate limits, and secure the service
  • Measure assisted shopping performance and business outcomes
  • Meet legal, accounting, and tax obligations

5. AI Processing and Third-Party Service Providers

The AI assistant is powered by OpenAI via API.

When you chat with the assistant, the following may be sent to OpenAI for response generation:

  • Your chat message
  • Recent chat context required for continuity
  • Product/catalog snippets relevant to your request

The store uses a bring-your-own-key model at the server level. API credentials are stored server-side and are not exposed to storefront users.

OpenAI acts as a service provider/sub-processor for AI response generation. Review OpenAI terms and data-processing documentation for current details.

Depending on your region and context, processing may be based on:

  • Contract performance: processing needed to provide shopping and order services
  • Legitimate interests: service security, diagnostics, and analytics
  • Consent: shopper consent before AI assistant use and any cookie/storage consent required by local law
  • Legal obligation: accounting, tax, fraud-prevention, and record-keeping requirements

If consent is required in your jurisdiction, you can withdraw consent by discontinuing assistant use and contacting us for data-rights requests.

The Outdoors demo includes two explicit consent layers:

  • Store-owner enablement consent in WordPress admin before the assistant can run
  • Shopper-facing AI notice and consent prompt before AI chat requests are sent

If consent is not granted, AI assistant processing is blocked.

8. Cookies, Local Storage, and Similar Technologies

The storefront may use cookies and local storage for:

  • WooCommerce cart/session continuity
  • Assistant session identification and chat state
  • Consent state persistence
  • Security and rate-limit controls

Where required by law, obtain cookie consent before non-essential storage/processing and provide a clear cookie notice.

9. Data Sharing

We may share data with:

  • Hosting and infrastructure providers
  • OpenAI (for AI processing)
  • Payment processors and fraud tools
  • Shipping/logistics services
  • Legal or regulatory authorities when required by law

We do not sell personal data in this demo workflow.

10. Data Retention

Retention periods should be set to the minimum needed for operations and compliance. Suggested defaults for this demo:

  • Order and accounting records: as required by tax/accounting law
  • AI analytics metrics (aggregated): up to 12 months
  • Raw chat/session artifacts: up to 30-90 days unless longer retention is required for security/legal reasons
  • Security logs and abuse controls: up to 90 days

Adjust retention based on your legal obligations and documented policy.

11. International Data Transfers

If service providers process data outside your country, we apply appropriate safeguards required by applicable law, such as contractual protections and transfer mechanisms.

12. Security Measures

We use reasonable administrative, technical, and organizational safeguards, including:

  • HTTPS/TLS in transit
  • Server-side API key handling
  • Access controls for admin functions
  • Request validation and rate limiting
  • WordPress and plugin update hygiene

No system is guaranteed 100% secure. If you suspect a security issue, contact us immediately.

13. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete data (subject to legal exceptions)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with a supervisory authority

To submit a request, contact privacy@outdoors.getpsai.com. We may need to verify your identity before fulfilling requests.

14. Children

This storefront is not directed to children under the age defined by applicable law. We do not knowingly collect personal data from children without required consent.

15. Policy Updates

We may update this policy to reflect legal, technical, or operational changes. The revised version will be posted with a new effective date.

16. Compliance Checklist for Store Operators

Before enabling AI shopping in production, confirm:

  • You published this policy (or your legal team's equivalent) on the storefront
  • You published a cookie/storage notice where required
  • You enabled store-owner and shopper consent flows
  • You documented data retention windows and deletion procedures
  • You reviewed OpenAI terms and data processing documentation
  • You configured a privacy request contact workflow