LIA Assistant — Privacy
How this app handles shopper and merchant data.
Who we are
LIA Assistant is provided by CodeGen (Pvt) Ltd. Contact: [email protected].
What the app receives
When a shopper opens the assistant on your storefront we receive the messages they type, any image they choose to send, and the products and cart they interact with. If the shopper is logged in to your store, Shopify tells us their customer ID so their conversation history follows their account rather than their browser. We also receive your product catalogue and your published policies so the assistant can answer from your store’s own data.
We do not ask for, or store, payment details
Checkout happens entirely in Shopify’s own checkout, not in the assistant.
Sub-processor: OpenAI
Shopper messages, and a short summary of the surrounding conversation, are sent to OpenAI to generate replies and to match search text against your catalogue. The assistant cannot function without this. We do not send OpenAI a shopper’s name, email address, phone number or delivery address — those are never added to a request by us. A shopper who types such details into the chat themselves will have them included in the message, as with any chat service.
What we store, and for how long
- Conversations, cart snapshots and session records are kept for 30 days from the shopper’s last activity, then deleted automatically.
- Large images are not retained after the conversation.
- Records of the store’s own usage and billing are kept for 7 years to meet accounting and tax obligations. These are records of the store’s account, not of any shopper, and they are retained even when shopper data is erased.
Deletion and access requests
We honour Shopify’s data requests. When Shopify notifies us that a shopper has asked for their data, or asked for it to be erased, we export or delete that shopper’s conversations and carts. When a merchant uninstalls the app, the store’s data is removed. You can also reach us directly at [email protected].
Cookies and tracking
The assistant sets no advertising or cross-site tracking cookies. It uses a session identifier so a conversation survives a page reload.
Changes
We will update this page when the app’s data handling changes, and the date below reflects the latest version.
Last updated: 31 August 2026