What Wekks can read
| From | What | Why |
|---|---|---|
| Shopify | Customers, orders, products, fulfillments, published policies | To answer tickets, and to learn your store |
| Gorgias | Tickets, messages, customers, tags, plus your account, users and integrations | To read and answer conversations, and to connect to your inbox |
Wekks doesn’t ask for marketing data or customers’ phone numbers.
What Wekks can change
| Where | What | When |
|---|---|---|
| Gorgias | Add notes, send replies, add tags, reopen tickets, add its webhook | From setup, as each play’s mode allows |
| Shopify | Refund and cancel orders, change addresses | Only after you allow order changes, and a person approves each one |
What Wekks keeps
Order and tracking details are read fresh from Shopify for each ticket, not stored as the truth. Wekks keeps:
- The conversations it handled, and what it decided about them
- Short notes it remembers about a customer, each tied to the ticket it came from
- Your plays, and your policies and catalog as it last read them
Conversations and everything decided about them are deleted 730 days after their last activity. When a customer asks you to delete their data, Shopify tells us, and we delete their conversations and memory.
If you uninstall
- Wekks stops at once.
- If you reinstall soon after, your plays and history are still there. You may need to choose a plan again.
- Shopify sends us your store’s deletion request 48 hours after you uninstall, and we then delete the store and everything in it.
Who processes it
| Service | What for |
|---|---|
| Fly.io | Hosting and the database, in the United States (Virginia) |
| Anthropic | The Claude AI models that read tickets and write replies |
| Resend | Alerts, and sending you the customer data you requested |
| Shopify | Billing. We hold no payment details. |
Your data is never used to train AI models, and we never sell it. The privacy policy has the full detail.
Security
- Signed in by Shopify. Wekks runs inside your admin and uses Shopify’s session tokens. There are no Wekks passwords to lose, and your Shopify staff permissions decide who can open it.
- Read-only to start. Changing orders needs your separate permission through Shopify.
- Encrypted credentials. Tokens for Shopify and Gorgias are encrypted (AES-256-GCM) before they’re stored, and deleted with the store.
- Rules outside the AI. Every action passes a check written in code. See Safeguards.
- Each store kept apart. Every record belongs to one store, and every query Wekks runs is scoped to that store.
- A full record. Every ticket keeps what Wekks saw, what it decided and why, so any answer can be explained later.
Think you’ve found a security issue? Write to [email protected].