Privacy Policy

Last updated October 23, 2026

Shinji is an AI agent that works in your store’s Seller Center. Today it works for TikTok Shop sellers in the US. SUZZU, LLC makes it (“we”, “us”). This policy covers shinji.ai and Shinji: what personal information we collect, what we do with it, who gets it, how long we keep it, and what you can ask of us.

Who this covers

“You” means a store owner who uses Shinji, and anyone they let sign in for their store. This policy also covers visitors to shinji.ai and people who write to us. Buyers and creators whose details Shinji reads in a store’s Seller Center have a section of their own, below.

What we collect

Your account

Your email address, and how you sign in. Sign-in runs on Amazon Cognito. With an email and a password, Cognito keeps your password, and we never see it. With Google, Cognito keeps your email address and your Google account’s id. We also keep your subscription’s status, which store and agent are yours, and a record of each sign-in: it lets you in for 12 hours, and once it’s a day past that, it’s deleted the next time anyone signs in.

Payments

Stripe takes your card on its own pages, so we never see your full card number. We see what Stripe shows us, such as your name, your card’s brand and last four digits, and your invoices.

Your store, while Shinji works in it

• Your Seller Center session. You sign in yourself, on your agent’s computer, and its browser keeps the session there. It saves no password.
• What Shinji reads in Seller Center to do its work: orders, returns, buyers’ messages and reviews, with buyers’ names and addresses; sample requests, with creators’ handles and sales figures; your products, your stock and your shop’s performance.
• Your work with Shinji: your chat, the changes it puts to you and what you decided, your Shop notes and plan, and the rules and limits set for your store.
• A recording of each change Shinji makes or rehearses, with screens of Seller Center.
• Your devices’ push subscriptions, if you turn on pings.
• How much AI Shinji used each week, for your allowance and your bill.

When you write to us

Through our contact form: your name, your email address and your message. To limit abuse, we keep a keyed hash of your internet address, never the address itself, and delete it once it’s a day old and the form is next used. If you give us a phone number for urgent matters when we set up your store, we keep it with your customer record.

Texts and Slack, once they’re available

If you turn on texts: your mobile number, your time zone, your consent, and a record of each time you turn texts on or off or reply to them. If you connect Slack: your workspace’s and channel’s names. We don’t share your mobile number with anyone for their marketing.

Automatically

Our hosting providers log each request to shinji.ai, with its internet address, browser and time, for security and to fix problems. Our home page also counts its visits, with our host’s visitor counter, Vercel Web Analytics. For each visit it notes the time, the page, the site that sent you (never the address there), your rough location (country, region and city), and your kind of device, its system and your browser. It sets no cookie, stores nothing on your device and keeps no internet address. It tells visitors apart by a code made from your request, which it discards after 24 hours, so it can’t recognize you on another day or follow you to other sites. We see only the totals.

shinji.ai sets two cookies, both to sign you in: one holds your session (for up to 36 hours), the other a sign-in in progress (for 10 minutes). Your agent’s page sets one of its own to keep you signed in, and so do our sign-in pages at auth.shinji.ai, and Google’s and Stripe’s pages. We use no advertising or analytics cookies. Apart from the home page’s visit counter, our pages run no tracking scripts and load nothing from other companies, so no other company can follow what you do on them, here or across other sites. Google’s and Stripe’s pages, when you use them, work under their own privacy policies. We don’t track you across other sites ourselves, so a Do Not Track signal changes nothing here.

How we use it

• To run Shinji for you: answer your questions, find the work in your store, put changes to you, and make the ones you approve.
• To keep those changes safe: we record each decision and its outcome, so we can check what happened and recover from a lost computer.
• To bill you and manage your subscription.
• To set up your agent, support you, and answer what you write to us.
• To count the visits to our home page, and see where they come from, as totals.
• To keep Shinji secure and working. To fix a problem or to support you, our team may look at how Shinji handled your store’s work, including its chat, cards and recordings, on its computer.
• To meet our legal obligations.

We write to you about your account and the service. We never sell personal information, share it for advertising, combine one store’s data with another’s, or use your store’s data, or your buyers’ and creators’, to train AI models.

Our team builds Shinji with AI coding tools, and they never get a store’s data, with one exception: the founder’s own store, the first on Shinji, whose data he lets us use, task by task, to improve Shinji. Copies of it are kept on his laptop until they’re reviewed and deleted, and in the transcripts of his Claude Code sessions, on the laptop and with Anthropic. We’re still confirming that his Claude Code account’s terms don’t let Anthropic train on it.

Claude, by Anthropic

Shinji works with Claude, an AI model made by Anthropic. For each piece of work, Shinji sends Claude its instructions, your recent chat, and the pages and answers it reads in Seller Center, which can include your buyers’ and creators’ details. It never sends sign-in or verification pages, passwords or the browser’s cookies. This goes to Anthropic through our account, under Anthropic’s commercial terms, which don’t allow Anthropic to train its models on it. Anthropic keeps it only as those terms allow, for example to check for misuse, and is asked to run each of Shinji’s requests in the US.

Who gets it

We share personal information only with the companies that run parts of Shinji for us, each for its part:

• Amazon Web Services: your store’s computer (Lightsail, in Virginia), sign-in (Cognito), and the email our contact form sends (SES).
• Anthropic: Claude, as above; and, for the founder’s own store alone, his Claude Code sessions (above).
• Vercel: runs shinji.ai, counts the visits to our home page, and runs the service that keeps the record of your decisions.
• Turso: our database, near Washington, D.C.: accounts, sign-ins, AI use, and the record of your decisions.
• Stripe: payments and invoices.
• Google: sign-in, if you choose Google.
• Slack: our team’s chat. When someone subscribes, their email address is posted there, so we can set up their agent. Our alerts there carry store ids and codes, never what a buyer wrote.
• Microsoft: our email, where messages from the contact form arrive.
• Apple, Google, Microsoft and Mozilla: their push services carry each ping to your device, encrypted. A ping is one line, with no buyer details.
• Twilio, once texts are available: your texts.

TikTok: Shinji works in your own Seller Center, so TikTok sees what Shinji does there and receives each change you approve.

We also share information when the law requires it, to protect someone’s safety or our rights, or with your consent. If another company takes over our business, your information may go with it, and we’ll tell you first.

Buyers and creators

If you bought from a store that uses Shinji, or work with one as a creator, the store decides how your details are used, and we handle them for the store, only to do its work. Shinji reads them in the store’s Seller Center, and they stay on the store’s computer, apart from four things: what Shinji sends Claude; a copy of the store’s own work, if it asks for one; our record of each change the store decided, which keeps ids (an order’s, a creator’s, a conversation’s), never your words or your name, but for the text of a reply the store approved, until 30 days after the reply is settled; and, for the founder’s own store alone, the copies he lets us use to improve Shinji (above). For a request about your details, contact the store. If you write to us, we pass your request to the store the same business day.

Where it’s kept, and for how long

We keep it in the US: your store’s computer in Virginia, and our website and database near Washington, D.C. The companies above may process it elsewhere.

• On your store’s computer: while you subscribe, and for 14 days after you leave, in case you change your mind. Then we delete the computer, with everything on it.
• Recordings of each change: we delete them once a month, by hand, once the change’s outcome has been final for 30 days. All of them go with the computer.
• The record of your decisions: what each decided change was, by its ids and numbers, who decided it and when, your rules and limits, and each outcome. It never holds your buyers’ messages, your chat or your sign-in. An approved reply’s text in it is replaced with “[redacted]” 30 days after the reply is settled. The rest is kept while you subscribe, and deleted within 30 days of the end of your subscription, all of your store’s at once: we keep a log of the deletion, with when it was made and how many records went, never what they held. Its encrypted backups are kept for 30 days, apart from the newest two, and go with it. Our database provider’s own backups keep it for a day after.
• Your account and its sign-ins: until you ask us to delete them, or we delete your store. Our database provider’s own backups keep them for a day after.
• What you write to us: in our inbox, for as long as we need it to help you.
• Visit counts: at Vercel, which keeps them for 12 months, and may keep them longer. They hold nothing that identifies you.
• An export you ask for: on our file share for 7 days at most.
• The founder’s own store, used to improve Shinji: on his laptop until reviewed and deleted; in his Claude Code transcripts, on the laptop and with Anthropic, under its terms.
• If you turn on texts: the record of your consent, and of each time you turn texts on or off or reply, is kept, as the rules for texting require.
• Billing records: payments and invoices at Stripe, and each week’s AI use and what of it was billed in our database, for as long as tax and accounting law requires.

How we protect it

• Each store’s agent runs on a computer of its own. Your Seller Center session never leaves it, and Shinji saves no passwords.
• Everything between your browser, shinji.ai and your store’s computer is encrypted on the way.
• The record of your decisions is backed up encrypted.
• Our team can reach your store’s computer, with administrator rights, to maintain it, so we could read what’s on it. Our rules: we never act in your store or approve anything for you, we never look at its screen while you sign in, and we view recordings only on that computer.

No system is perfectly secure. If a breach affects your information, we’ll tell you promptly, as the law requires.

What you can ask of us

• A copy: we export your cards and what became of them, your chat, Shinji’s AI use, what counted against your limits, and your rules, as files.
• A correction: you change your Shop notes and your plan in Shinji yourself. The rules Shinji applies for your store, such as which creators’ sample requests it puts to you, our team sets from what you tell us, so write to us to change one. Store data is a copy of Seller Center, corrected there. For anything else, write to us.
• A deletion: of one card’s content, or of everything. We confirm the request is yours, act on it within 30 days, and tell you what stays and why: billing records, and, while you still subscribe, a change’s safety record without its content. Some copies take longer to go: our database provider’s own backups, until they expire a day after; the backups your store’s computer makes of its records each time we update its software, until 20 newer ones replace them; a recording’s working copy, until your store’s browser next closes; and notes in your store’s audit log, until its computer is deleted, unless we erase them by hand sooner.
• Fewer messages: reply STOP to any of our texts; turn off pings in Shinji or on your device; disconnect Slack on your account page.
• Leaving: cancel from your billing page, and ask us to delete your information sooner if you like.

We answer every request within 30 days. If a privacy law where you live gives you more rights, ask, and we’ll honor them. We won’t treat you differently for asking.

Children

Shinji is for businesses, and not for anyone under 18. We don’t knowingly collect children’s information.

Changes

When we change this policy, we post it here with a new date. If a change affects how we use your information, we’ll email you before it takes effect.

Contact

Write to us through our contact form at shinji.ai/contact. SUZZU, LLC makes Shinji.