Privacy notice

We collect only what the relevant interaction needs.

• Contact and demo forms: name, email, company, role, message, consent and a hashed user-agent string.
• Sage accounts: name, email, a scrypt password hash, account and store links.
• Shopper sessions: a session ID, the QR code and aisle that started the session, messages, recommendations, handoff events and timestamps.
• Technical logs: request metadata needed to operate and secure the service. We do not log secrets or credentials.

We use contact details to reply to your enquiry and, where agreed, to manage a commercial relationship. This is based on your consent or our legitimate interest in responding to a business enquiry.

Store and conversation data is used to provide the service the merchant has asked for, including answers, transcripts, usage reporting and attribution. That processing is performed on the merchant's instructions.

Security and operational logs are used under our legitimate interest in keeping the service safe and available.

You do not install an app and you are not asked to create an account. The QR code opens a web session. The demo does not link your session to your name.

The store you are in can review the questions and answers from that session. If you do not want a conversation stored, speak to a member of staff instead of using the QR code.

Do not type payment card details, passwords or sensitive health information into the assistant. Salewise does not take payments and does not need that data.

To answer a question, the service sends the question, retrieved catalogue candidates and store settings to a hosted large-language model through an OpenAI-compatible API. The model selects from those candidates; the server renders price and stock.

Prompts do not include payment card data. The model provider processes the request under its contract with us. Model choice is server-side and may change.

Transcripts and structured intents are stored so the merchant can review answers and improve the playbook.

We do not sell personal data and we do not run advertising profiles.

We share data with service providers that host and operate the platform, principally Google Cloud for compute, database and secrets, and the hosted model API used for inference. They act under contract and only on our instructions.

We may disclose data if required by law, to protect rights or safety, or as part of a corporate transaction with appropriate safeguards.

Some providers may process data outside the UK. Where that happens, we rely on contractual safeguards recognised under UK data protection law and set out the arrangement in the DPA.

Enquiry data is kept while the enquiry is live and for a reasonable follow-up period, unless you ask us to delete it sooner.

Store and conversation data is retained for the period agreed with the merchant and then deleted or anonymised under the DPA. Security logs are kept for the short period needed to investigate incidents.

Credentials are encrypted with AES-256-GCM and bound to their integration. Passwords use scrypt. Access is scoped by account and store. Production fails closed when required secrets are missing.

No system is perfectly secure. If you believe you have found a vulnerability, contact support@salewise.co.uk before disclosing it publicly.

Under UK GDPR you can ask for access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it.

Email support@salewise.co.uk. We will respond within the statutory period. If you are a shopper and the store is the controller, we may route your request to the merchant.

You can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve it first.

This website and Sage are not directed at children. The in-store assistant may be used by people of all ages, but it is not designed to collect a child's account details. Merchants should set handover rules for age-restricted products.

We may update this notice as the service changes. The date at the top shows the latest revision.

Privacy questions: support@salewise.co.uk. Salewise, London, United Kingdom.