Asklo Integration GDPR & Data Protection

Cookie Policy

Sub Processors

Data Processing Addendum

Title

Definitions

Personal data: any information relating to an identified or identifiable real person. An identifiable real person is defined as any real person who can be directly or indirectly identified.
Processing: any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, transmission, storage, conservation, extracting, consultation, use, disclosure by transmission, and so on.
Controller: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor: the natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Klevu’s commitments as a processor

As a processor, KLEVU commits to:

Processing personal data solely for the purposes of carrying out the services correctly. KLEVU will never process or store your information for any other purposes (marketing, etc)
Unless otherwise agreed, keeping your personal data inside the EU and only in countries recognized by the European Union as offering a sufficient degree of protection.
Informing you if we have enlisted a subcontractor to process your personal data (e.g. payment gateways).
Adequate security measures to protect the privacy of data.
Reporting any data breach to you without “undue delay”.
Providing you with adequate documentation of our services.

Klevu’s commitments as a data controller

KLEVU is classed as a data controller when we collect your data for billing and managing accounts receivable, for example. We are committed to:

Limiting the data collected to what is strictly necessary and for the purpose for which it was collected.
Storing personal data for a limited and appropriate time.
Implementing technical and organizational measures to ensure a high degree of security.

What personal data is collected, and for what purposes?

KLEVU collects the following personal information from its customers (i.e., merchants) and shoppers using the ASKLO integration.

Merchants

First name, Last name, Company address, and website URL:

Used for identifying a customer in our database and solely for the purpose of communication between Klevu and the merchant.

Email address:

Used as an account identifier
Used for billing and account-related matters such as new features announcements, guided tours, personalized content, surveys, plugin upgrades, and other notifications to which the merchant has subscribed.

Business name, Billing address, and VAT number:

Used for billing and invoicing purposes.

Payer’s email address and credit card details

Used for collecting payments but never stored in a database or logs.

Shoppers

Random Unique Identifier

Used to link product order details to chats from the same shopper

Shopper IP address

Used to calculate asklo.ai assisted conversions
To identify shoppers location (country and region) to provide location based conversation insights

Shopper translation data

Product ID, price paid and the IP from which the product was bought to calculate asklo.ai assisted conversions.

Where is this data stored? Are those premises GDPR compliant?

AWS is used to provide the infrastructure for the Asklo integration. AWS have a high security standard with multiple security attestations/certifications such as ISO 27001 and SOC2. They are also GDPR/UK DPA compliant.

How long is the data stored?

Aggregated shopper data is stored for up to 36 months.

Data sharing

KLEVU does not share any data collected from one store with another. Aggregated data is used for the core algorithm to improve product functionality for all customers.

Does Asklo share any data with any 3rd party organisations?

Nothing in this policy contradicts the following statement: except for the subdomains: moi-ai.ksearchnet.com, ipv4check.ksearchnet.com and ipv6check.ksearchnet.com, Asklo does not collect, retain or share any data regarding a particular user or device (including IP ADDRESSES AND user identifier) on sites or apps not owned by Asklo.