Piste is an AI agent for merchants. It is operated by Furneaux Research LLC, a Wyoming limited liability company (“Piste”, “we”, “us”). This policy explains what information Piste collects when you use the Piste app at app.usepiste.com, its Slack and iMessage channels, its Shopify app and its MCP server, what we do with it, who we share it with, and how you can have it deleted.
Piste is a business product. The merchant who signs up (the “owner”) decides what to connect, and is responsible for having the right to connect it. Where Piste processes information about the merchant's own customers, it does so on the merchant's behalf.
What we collect
Your account
- Your name and email address, and sign-in information handled by our authentication provider, Clerk.
- Your workspace: its name, your agent's settings, automations, skills and the agent's memory document.
What you and your team send the agent
- Messages and files you send in the web chat, in Slack where Piste is installed, and by iMessage from a verified number, and the agent's replies.
- For Slack, the Slack user and workspace identifiers of the people who message Piste. For iMessage, the phone number or Apple ID email you verify.
Your Shopify store
- When you connect a store, Piste reads it through Shopify's Admin API with the permissions you approve: products, inventory, orders, discounts, marketing events and sales reports. Piste reads this live when the agent needs it, to answer a question or run a task.
- Piste stores daily sales totals for measurement: per day, the number of orders, sales, net sales and new customers, grouped by the order's campaign tags (UTM source, medium and campaign) and referring channel. These are totals across many orders. They contain no customer's name, email, address or other personal information.
- Piste does not keep a copy of your orders or your customer records.
Your Meta Ads and Google Ads accounts
- When you connect an ad account, Piste receives an access token from Meta or Google and stores it encrypted. It reads daily totals for each campaign: spend, impressions, clicks, and the conversions and conversion value the platform reports.
- Piste reads nothing about individual people from your ad accounts: no audiences, no user lists, no ad-level or creative data.
- If you approve a proposed change in Piste, Piste changes that one campaign's budget in your ad account, and nothing else. Piste never changes an ad account without your approval.
Other connections you choose
- Apps you connect through Settings (via Composio), outside MCP servers you add, a ChatGPT plan you connect for coding jobs, and assistants such as Claude or ChatGPT you connect to Piste's MCP server. We store what each needs to work, such as an encrypted token, and a record of which assistant connected and when.
Usage and technical information
- How much the agent is used (model usage and cost per workspace), logs of errors and requests, and basic device and browser information our hosting provider records.
How we use it
- To run Piste: answer your questions, run the automations and jobs you set up, write measurement studies and weekly plans, and carry out the changes you approve.
- To secure Piste, prevent abuse, enforce usage limits, and fix problems.
- To contact you about your account and the service.
We do not sell your information, share it for cross-context behavioural advertising, or use it to build advertising profiles. We do not use data from your Shopify store, your ad accounts or your Google account to train AI models.
Google user data
Piste's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Piste requests access to Google Ads only to read your campaigns' daily performance and, when you approve it, to change one campaign's budget. We don't allow people to read this data except with your permission, for security, or to comply with the law.
AI processing
Piste's agent runs on large language models from providers such as Anthropic and OpenAI, reached through Vercel's AI Gateway. The content of a conversation, and the data the agent reads to answer it, is sent to the model provider to generate the reply. We use these providers under terms that do not allow them to train their models on it. AI output can be wrong: check anything important before relying on it.
Who we share it with
We share information only with the service providers that run Piste for us, with the services you connect, and when the law requires it:
- Vercel (hosting, AI Gateway, file storage and job sandboxes), Neon (database), Clerk (sign-in).
- Model providers such as Anthropic and OpenAI, as above.
- Photon (iMessage delivery), Slack, Composio (app connections), Browserbase (the agent's browser), Context.dev (brand lookup from your website during onboarding) and treg.to (paid data tools, if you turn them on).
- Shopify, Meta and Google, to read from and act on the accounts you connect.
- A buyer or successor if Piste's business is sold or merged, under this policy.
Security
Access tokens for Shopify, Slack, Meta, Google and other connections are encrypted with AES-256-GCM before they are stored, and each is bound to its own record. Data travels over TLS. Access to production systems is limited to the people who need it.
How long we keep it
- We keep your workspace's data while your account is open.
- When you disconnect an ad account, Piste deletes its token and the daily totals it read. Studies keep the totals they were calculated from, so an earlier answer can be explained.
- When you uninstall Piste from Shopify, Shopify tells us, and we delete the store's connection data 48 hours later as Shopify requires.
- When you ask us to delete your account, we delete your workspace's data within 30 days, except where the law requires us to keep something.
Your choices and rights
You can see and remove each connection in Settings, then Connections, and see and revoke the assistants connected to Piste's MCP server there. Depending on where you live, including under US state privacy laws, you may have the right to access, correct, delete or get a copy of your personal information, and to not be treated differently for asking. To make a request, email support@usepiste.com from the address on your account. We'll answer within 30 days. See Data deletion for how to delete your data.
Children
Piste is for businesses and is not directed to children. We do not knowingly collect information from anyone under 16.
Changes
We'll post any change to this policy on this page with a new effective date, and tell account owners by email before a material change takes effect.
Contact
Furneaux Research LLC, a Wyoming limited liability company. Email support@usepiste.com.