Privacy Policy
1. Who we are
AI Search is provided by Thaitus, a sole trader business in Lithuania. Contact for privacy questions: info@thaitus.com.
2. Our two roles
- Controller for data about our business customers (merchants): account, contact, billing and usage data.
- Processor for data about merchants' shoppers: search text that shoppers type on a merchant's store. The merchant is the controller of that data, and our Data Processing Terms apply. Shoppers should contact the store they used to exercise their rights; we will help the store respond.
3. What we process
| Data | Source | Purpose | Legal basis (controller data) |
|---|---|---|---|
| Merchant account data: store name, site address, contact name and e-mail, API keys, record of acceptance of our Terms (version, time, accepting user's e-mail) | You, the WordPress plugin | Providing the Service, support, proof of agreement | Contract; legitimate interest in keeping evidence of agreement |
| Catalog content: product names, descriptions, categories, attributes, prices, stock and links | Your WooCommerce store, via the plugin | Making your products searchable | Contract (processed on your behalf where it contains personal data) |
| Shopper search text | Shoppers, via the plugin on your store | Returning matching products; improving search quality | Processed on the merchant's behalf |
| Usage data: daily request counts and AI usage per store | The Service | Usage limits, billing, capacity planning | Contract; legitimate interest |
| Operational logs: request time, route, status, latency, store identifier, error messages, and search logs (shopper search text and the AI's replies, with e-mail addresses and phone numbers masked) | The Service | Security, debugging, abuse prevention, improving search quality | Legitimate interest |
| Billing data: billing contact, company and VAT details, subscription status. Card details are handled by our payment processor and never reach us. | You, our payment processor | Billing, tax and accounting | Contract; legal obligation |
Shopper data: the plugin does not store shoppers' IP addresses, names, e-mail addresses, cookies or account identifiers. When direct search is enabled, the shopper's browser connects to our API and exposes its IP address at the network level; we do not store or log storefront-request IP addresses. For abuse protection only, we store the IP address of signup attempts and of requests made with an invalid API key; these records expire after about an hour and are then deleted automatically, normally within a few days. Shoppers can still type personal data into the search box themselves, so we treat search text as potentially personal.
4. Sub-processors
| Provider | What they do | Data | Location |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, database, logs | All data above | EU (Frankfurt, eu-central-1) |
| Google LLC / Google Cloud (Gemini API) | Ranking products and writing short answers | Search text, relevant catalog excerpts | Global (may include US) |
| Voyage AI Innovations, Inc. | Text embeddings for matching | Search text, catalog text | US |
| Anthropic PBC (only if enabled as an alternative AI provider) | Ranking products and writing short answers | Search text, relevant catalog excerpts | US |
| Stripe Payments Europe, Ltd. | Payment processing for paid plans | Billing data | EU / US |
AI providers process data under their commercial API terms. Transfers outside the EEA rely on an adequacy decision, such as the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. We will update this list before adding a new sub-processor.
5. How long we keep data
- Catalog content: until you delete the products or the plugin removes them on sync, or until your account is closed. Deleted on account closure.
- Shopper search text: kept in search logs, together with the AI's replies, for 90 days to debug and improve search quality, with e-mail addresses and phone numbers masked. Short-lived caches used to avoid repeat work expire within minutes and are then deleted automatically, normally within a few days.
- Operational logs: 90 days.
- Usage data: for the life of your account. Deleted on account closure.
- Signup record (site address, e-mail and signup time): kept after account closure to enforce one account per site, and replaced if the site signs up again.
- Abuse-protection records (IP addresses of signup attempts and invalid API-key requests): expire after about an hour and are then deleted automatically, normally within a few days.
- Database backups: our main database keeps point-in-time restore copies for up to 35 days, so deleted data disappears from backups within that period.
- Account data and Terms acceptance records: for the life of your account and afterwards for as long as needed to establish or defend legal claims.
- Billing records: as long as Lithuanian accounting and tax law requires (generally 10 years).
6. Security
All traffic uses HTTPS. Access uses per-store API keys with separate scopes for search and catalog management, and keys are stored hashed. Provider credentials are kept in a managed secrets store. Access to production systems is restricted.
7. Your rights
Under the GDPR you may request access to, correction or deletion of your personal data, restrict or object to processing, and receive your data in a portable format. Contact us at the address above. You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the authority in your country.
8. No sale, no advertising, no training
We do not sell personal data, use it for advertising, or use your catalog or shoppers' searches to train AI models ourselves.
9. Changes
We will post changes on this page with a new version date and, for material changes, notify merchants by e-mail or in the plugin.