Security and where your data lives

Each request is usually handled in the Cloudflare data centre nearest to the sender.

Email addresses, phone numbers, names, cities, regions, postal codes and customer IDs are stored only as hashes. The buyer's browser details are stored as they are, and the IP address is encrypted with your store's own key. All of these are removed from the order after 90 days. We keep the country and, only if you use Google Ads, the plain postal code that Google Ads needs. Street addresses are not stored. All traffic uses HTTPS, the database and storage are encrypted, and nightly backups are encrypted with a separate key.

The assistant runs on Anthropic's Claude; Anthropic processes the data in the United States. It gets your messages, with email addresses, phone numbers and card numbers masked, your store's settings, counts, platform connections and incidents, and the numbers of orders you ask about, with whether each was sent and what the shopper's consent allowed. It gets none of your customers' names, contact details, addresses, hashes, IP addresses or order amounts from our systems. Names and other details you type into the chat yourself are not masked, so they can reach it.

With a purchase the buyer's consent allows, Tikra sends the IP address and browser user agent in full to Meta, TikTok, Pinterest, Snapchat and ChatGPT Ads. Google Ads gets the user agent, and the IP address only for buyers outside the EEA, the UK and Switzerland. Google Analytics 4 gets it shortened, with the device type, operating system and browser name instead of the user agent. An order's Technical details show "Sent with:" for that order. Tikra has no list of your buyers' IP addresses to show you.