This Privacy Notice explains how Hesient Inc., doing business as Sell&Tell (“we,” “us,” or “Company”), collects, uses, and discloses personal information through our website, account services, and Shopify app. Our current commercial launch is for United States merchants.
We handle merchant and website information for our own business purposes. We process store and shopper information on a merchant’s behalf under the Data Processing Agreement. For information processed on a merchant’s behalf, the merchant’s privacy notice also applies; shoppers should direct store-specific requests to that merchant. We can help route a request sent to team@sellandtell.ai.
1. Merchant and Website Information
- Account and contact information: name, business and store information, email address, login information, and contact details supplied through forms, demonstrations, marketing activities, or communications with us. This can include postal address, phone number, and social-media identifiers when provided.
- Usage and technical information: account activity, pages visited, links clicked, browser and device information, online identifiers, IP address, approximate location, and email engagement. Our website and service providers may use device information or fingerprinting for fraud prevention and security; this is separate from the shopper Widget described below.
- Support information: email correspondence and information supplied to investigate a request. Customer support is by email, with an initial response within twenty-four hours.
- Billing information: subscription status, charges, billing contact information, and records received from Shopify. Sell&Tell subscriptions are billed only through Shopify. Payment providers handle payment credentials; we do not store full payment-card numbers.
2. Shopper, Product, and Order Information
2.1 Shopper Widget
The shopper-side Widget records dwell time, scrolling, the page zone being read, variant changes, cart actions, and the page address. Its automatic behavioral events do not include a shopper’s name, email address, or IP address, and it does not read the Shopify customer login. It uses a random visitor identifier in a first-party cookie and browser storage for one year, together with a session identifier for each browser tab. Random identifiers can still constitute personal information even though they do not contain a name. A behavioral summary describes a visit; it is not a device fingerprint. Text a shopper enters into the panel is stored, up to 2,000 characters, and can include personal information voluntarily entered by that shopper.
The Widget does not read a Shopify customer list or link the buyer’s name or email to a session for revenue attribution. Persistent random identifiers and free-text responses can nevertheless be personal information; we do not describe all Widget data as anonymous.
2.2 Shopify Orders
The Shopify order integration uses new-order webhooks and synchronization of past orders. The Company stores order identifiers and numbers, totals, status, payment method, and line items. Stored order records do not contain buyer names or email addresses. Order data is used only to attribute revenue to a Widget session using the order identifier, never by matching the buyer’s identity. The app does not read Shopify’s customer list and has no Shopify write permissions.
Order identifiers and transaction details may still constitute personal information. Excluding buyer names and email addresses from order records does not make all information handled by the Services anonymous, including personal information a shopper may voluntarily enter in the panel.
2.3 Catalog, Theme, and Store Settings
The app reads product titles, descriptions, vendors, product types, handles, tags, images, variants, and prices. It has read-only theme access. Merchants control Widget activation in Shopify’s theme editor and provide store branding and settings. The app does not edit themes, tag customers, change metafields, or otherwise write to Shopify.
3. Sources of Information
We receive information directly from account holders and website visitors; from employers, colleagues, and referral partners; through website and account tracking technologies; and from Shopify, authentication and service providers, data brokers, social networks, and marketing partners. The latter marketing sources relate to our business contacts and website marketing. Shopify store and shopper information is processed for the merchant under the DPA, not acquired from data brokers.
4. How We Use Information
- Create, authenticate, administer, and secure accounts; provide the Widget, dashboard, Monday Brief, and before-and-after measurement.
- Read catalog context, analyze visit behavior and panel responses, and attribute revenue to Widget sessions using order identifiers.
- Manage subscriptions, billing, the trial reminder, customer support, and service communications.
- Understand website and account usage, investigate errors and misuse, and improve the Services.
- Conduct our own business marketing, manage leads and events, measure advertising, and send marketing messages subject to applicable choices.
- Comply with law, maintain necessary business records, enforce agreements, and protect rights and security.
Shopify store data and shopper information processed on a merchant’s behalf are subject to the purpose restrictions in the DPA. They are not used to build identity-based shopper advertising profiles or sold to data brokers.
5. AI Processing and Training
The Company may improve its own AI models using de-identified or aggregated data that does not identify any individual. Personally identifiable information, including personal information within free-text responses, must be excluded before data is used for training. The Company will not attempt to re-identify training data. Third-party AI providers may process data to deliver the Services, but may not use Customer Data or Shopper Interaction Data to train their own models, and the Company requires that restriction in its provider agreements.
The Services provide information and recommendations for merchant review. Merchants decide whether to make changes; the app does not make changes to Shopify or decisions determining a shopper’s legal rights.
6. Who Receives Information
- Service providers: hosting, infrastructure, AI processing, authentication, security, analytics, communications, customer support, and billing providers receive information needed for their work. Shopify handles subscription billing and supplies the authorized store data.
- Website and business-marketing providers: Google Analytics, Stripe, Intercom, HubSpot, Meta, Google Ads, Microsoft/Bing, and LinkedIn provide the functions described in the Cookie Policy. Stripe’s payment-related infrastructure does not create a separate Sell&Tell subscription-billing method. Intercom may support customer communications; contracted customer support remains email-only.
- Marketing partners and sponsors: we may share business contact information for marketing and event purposes, subject to applicable law and your choices. Advertising technologies on our own website may disclose online identifiers and activity for targeted advertising; applicable state law may describe this as a sale or sharing of personal information.
- Legal and business disclosures: we may disclose information when required by law, to protect rights or security, to professional advisers, or in connection with a merger, acquisition, financing, or sale of business assets, subject to applicable safeguards.
The advertising and business-marketing disclosures above do not authorize sale or sharing of the store and shopper personal information we process as a service provider for a merchant. Those activities remain governed by the DPA.
7. Cookies and Consent
Our website and account services use cookies, browser storage, pixels, and related technologies for operation, analytics, functionality, security, and marketing. The Cookie Policy distinguishes these uses from the shopper Widget’s first-party identifiers.
By default, the shopper-side script starts without waiting for a cookie banner. It can wait for consent when the merchant’s banner sends the required signal. Installation alone does not establish consent integration. Customer is responsible for providing accurate notices and configuring and verifying any consent or opt-out controls required for its store before collection begins.
8. Retention and Deletion
During active service, raw shopper behavior is deleted after ninety (90) days. Other store records are retained to provide the merchant’s Services, subject to applicable deletion requests and legal requirements.
After the trial ends without a paid subscription, or after paid access expires or otherwise ends, the merchant has seven (7) calendar days to export or recover its store data. the merchant may request export or recovery at team@sellandtell.ai. We deletes that store data on the eighth day after access ends. Cancelling a renewal does not start this window while paid access continues. A recovery request does not extend the deletion deadline; the merchant should complete its export within the seven-day window. This does not require deletion of records that applicable law requires the Company to retain, which will be restricted to that legal purpose, or of lawfully de-identified or aggregated information that no longer identifies a person or the merchant.
Merchant account, billing, legal, and business-contact records may be retained as needed for their disclosed purposes and legal obligations; this is not an extension of the seven-day recovery period for store data. Browser cookies and storage are controlled separately on the visitor’s device. A one-year identifier lifetime does not mean raw behavior is stored for a year.
9. Privacy Choices and Requests
Depending on your state, the information involved, and applicable law, you may have rights to know or access personal information, obtain a portable copy, correct inaccuracies, delete information, opt out of sale, sharing, or targeted advertising, and limit certain uses of sensitive personal information. We do not require shoppers to provide sensitive personal information in the panel. Where applicable, you may use an authorized agent or appeal a decision on your request. We will not unlawfully discriminate against you for exercising these rights.
Send a request or appeal to team@sellandtell.ai. Please identify the request and the website, account, or merchant store involved. We may need to verify identity and authority using information appropriate to the request. For store data we process on a merchant’s behalf, we will route the request to the merchant and assist as required. We respond within the periods required by applicable law. Where applicable law requires recognition of an opt-out preference signal, that signal must be treated as a valid request for the processing it covers.
10. Marketing and Browser Choices
To stop marketing emails, use the unsubscribe link or email team@sellandtell.ai. Necessary account, billing, and security messages may continue. Browser settings can block or clear cookies and storage; doing so can affect functionality. See the Cookie Policy for provider choices and the distinction between browser signals and the merchant’s Widget consent integration.
11. Security
We are responsible for reasonable safeguards appropriate to the information and applicable law. No internet transmission or storage system is completely secure. This Notice does not promise a specific backup schedule, data-durability percentage, restoration time, certification, or uninterrupted availability.
12. Children
Sell&Tell accounts are intended for adult business users. We do not knowingly solicit children’s personal information. Merchants must use the Services lawfully for their audience and must not direct shoppers to submit sensitive information. If you believe a child’s information was submitted, contact the merchant involved or team@sellandtell.ai so the request can be investigated.
13. United States Launch and Processing Locations
We currently market the Services to merchants in the United States. Information may be processed in the United States and other locations where our providers operate. The location of our commercial launch does not by itself determine the laws applicable to a merchant’s shoppers. Contact team@sellandtell.ai for information about processing arrangements relevant to your use. This Notice does not incorporate a separate European privacy notice or international-transfer addendum.
14. Changes
We may update this Notice. Material changes will be identified by a revised effective date and additional notice where required by law. Changes to subscription obligations follow the Master Subscription Agreement.
15. Contact
For all privacy, support, and legal questions, contact Hesient Inc. at team@sellandtell.ai.