Privacy policy

This policy covers the shopping assistant service at this address, operated by Shopou Advisor. It is short because the service keeps almost nothing.

What the service receives

• What you ask for: a goal in your own words, a budget, stated preferences, product ids you choose, and any facts you or your client send back from the research checklist.
• Your IP address, used to rate-limit requests. It is held in memory for the rate-limit window (10 minutes) and is not written to the service log.
• If this deployment uses OAuth: a bearer token, whose payload names a random subject, the client that signed in, the scope and an expiry. It is not linked to your name, email or any account.

What is sent to others

Search wording and product ids are sent to Digikala's public web API to read prices, stock and specifications. A separate request is made to a public currency-rate feed to show a toman figure in dollars. Neither request carries your identity, your IP as a forwarded header, or anything about your conversation.

No data is sold, shared for advertising, or used to build a profile.

What is stored

Nothing is written to a database or to disk by this service. In memory, and lost when the process restarts:

• retailer responses already fetched, for 10–30 minutes depending on the kind of response;
• rate-limit counters, for the same 10 minutes window;
• aggregate counters — how many calls succeeded, how many were served from cache, how many failed — which hold no request detail and are also published, in aggregate, at /metrics;
• if OAuth is enabled: authorization codes for 60 seconds, and the ids of refresh tokens already exchanged, for up to 30 days;
• signed tokens, which are verified rather than stored — the service holds no token table.

There are no cookies, no local storage, no analytics and no tracking pixels. There is no account to create and nothing to sign out of.

Logs

The service writes one JSON line per event to its own error stream. Every request gets an opaque id, and every line written while that request is answered carries it, so a request's tool call, the retailer reads behind it and any error can be read as one trace. The same id is returned to the caller in the response's x-correlation-id header; it identifies a request, not a person. A line says which tool ran, how long it took, whether it succeeded and why it refused, how many items it returned, and how many results a search came back with.

It does not say what you asked for: a search produces its length in characters and an opaque ten-character id, never the words, and an answer is counted rather than quoted.

The log is read by whoever operates the deployment, and how long it is kept depends on their log configuration. It contains no search text, brief or preference, no bearer tokens, and no IP addresses.

OAuth and disconnecting

Signing in creates a connection identity, not an account. Access tokens expire within 60 minutes; refresh tokens rotate on every use, so a copied one stops working once the real client refreshes. The service does not offer server-side revocation: to disconnect, remove the connector in your client, which discards its tokens. The operator can invalidate every token at once by rotating the signing secret.

Your choices

Because no personal data is stored, there is no stored record to access, correct or delete. If you believe something was logged that should not have been, write to the contact below and say roughly when you used the service.

A question about this policy, or a correction to it, can also be filed in the public repository: github.com/mrchatam/shopou-advisor.

Contact: info@advisor.shopou.ir

Changes to this policy are dated at the foot of the page.