Privacy policy
Connect My Agent lets a shopper use an AI assistant to browse and prepare purchases at online stores that have chosen to take part. It is published by Moogento, operated by DeskB Ltd. This policy explains what the connector handles, why, who receives it, how long it is kept and what you can do about it.
Data categories and purposes
| Data | Purpose | Kept by the connector |
|---|---|---|
| Requests you make through the assistant: a store domain, search text, product SKUs and quantities | To look up stores and products and to price a basket | Not stored. They are passed to the store you named and the answer is returned to the assistant. |
| A random connection identifier derived with a secret key, and its active or revoked status | To recognise your signed-in connection without your name or email | Held while the connection exists. The connector does not obtain your email address from the assistant sign-in. |
| Your store links: which store, a link identifier, a link version and the permissions you agreed to | To act for you at a store only within the permissions you granted | Held until your whole connection is cleared. A link unused for 90 days is revoked, and a disconnected link stays recorded as revoked until that clearing. |
| Sign-in records for the assistant: its client registration, its grant (client identifier, sign-in time) and its access and refresh tokens | To keep you signed in without asking again | A client registration lasts 180 days. An access token lasts one hour. A refresh token expires after 90 days without use. A grant ends at the latest 365 days after sign-in, and also ends if you disconnect or the assistant provider disconnects it. |
| One-time link tickets and basket quote records, stored as hashes with an expiry | To connect a further store safely and to tie a quote to one link | Link tickets expire after ten minutes and work once. Quotes are valid for 15 minutes. |
| Cart, order, delivery, promotion, account and checkout details you ask about when signed in: for example order numbers and status, tracking events, shipping methods and rates, a saved shipping address, your account name and the email address on your store account | To answer your question or carry out the action you asked for at the store | Passed through between the store and the assistant. Order and cart content, addresses and account data are not stored by the connector. The store keeps its own records. |
| Technical request logs: route, tool name, result class, response code, timing and a shortened one-way tag for the store, the first characters of a licence fingerprint, and a one-way reference for your signed-in connection | To run, secure and fix the service | Logs carry no store domain, search text, SKUs, prices, addresses or order details. Logs are kept under our hosting provider's log retention settings. |
| Network address, used only as a keyed one-way hash in rate-limit counters | To stop abuse and keep the service available | A counter stops counting when its rate-limit window ends, from one minute to one day. The stored hash is removed when the service next counts a later request of the same kind, so it can remain stored longer when no such request follows. |
The connector does not take payment details and does not place an order or submit a payment. Checkout finishes on the store's own website.
Who receives data
- The store you choose. It receives the requests needed to answer you, signed so that the store can tell they come from the connector. Your assistant sign-in token is never sent to a store.
- Your AI assistant provider. Tool answers are returned to the assistant, which handles them under its own terms and privacy policy.
- Our hosting provider, which runs the connector and holds the sign-in and connection records for as long as the connection is active, up to 365 days. After that cap, or after you remove the connector, a sign-in record can last up to a further 90 days after its last use before it ends on its own. Clearing of the connection records then follows once revocation at every linked store has been acknowledged and the weekly check has run.
- Moogento, operated by DeskB Ltd, operates the connector and can see the stored records and logs described above. The connector does not sell this data and does not use it for advertising.
Each store is responsible for the data it holds about you under its own privacy policy.
Your controls
- Ask the assistant to list your linked stores, or to disconnect one. Disconnecting a store marks its link as revoked straight away, so it can no longer be used, and queues a request to the store to revoke it, retrying if the store is unavailable. The revoked link record (store, link identifier, version and permissions) is kept until your whole connection is cleared, as described in the next point.
- Remove Connect My Agent from your assistant's connector settings to end the connection. The connector detects this in a weekly check and queues revocation at each linked store. It clears the related records, including revoked link records, once every linked store has acknowledged revocation. Revocation to a store that is unavailable, or that is no longer available to the connector, is retried and the related records are kept until it succeeds.
- Browse without signing in: store, product and basket price lookups work without an account.
- Write to moo@moogento.com to ask what is held about your connection or to ask for it to be removed. Requests about data a store holds go to that store.
Changes and contact
We will update this page and its date when what the connector handles changes. Questions: moo@moogento.com.