EcomIntent is operated by John Bolognino ("we," "us," "our"), based in Massachusetts, United States. We operate the intent classification API available at ecomintent.com.
For the purposes of the General Data Protection Regulation (GDPR), John Bolognino is the data controller. Contact: [email protected].
When you visit ecomintent.com we collect:
We do not use tracking cookies, advertising pixels, or analytics platforms on this website.
When you sign up for and use the EcomIntent API, we or our payment processor (RapidAPI / Stripe) collect:
/classify. This is processed transiently to generate a classification response and is not stored by default. See Section 3 for the opt-in exception.If you install EcomIntent via the Gorgias App Store or Shopify App Store, we process support ticket text on your behalf as a data processor. You remain the data controller for your customers' data. We process this data only to return classification results and do not store ticket text. See Section 3 for the opt-in training data exception.
We operate a voluntary model improvement programme. By default, no input data is stored or used for training.
If you explicitly opt in via your account settings:
You may withdraw consent and opt out at any time via account settings. You may request deletion of all stored hashed examples associated with your API key by emailing [email protected].
Lawful basis (GDPR): Explicit consent (Article 6(1)(a)).
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Cloudflare | CDN, DDoS protection, DNS | IP address, request metadata | cloudflare.com |
| RapidAPI | API marketplace, billing, key management | Email, billing details, usage stats | rapidapi.com |
| Modal.com | Serverless GPU inference (API hosting) | API request payloads (transient) | modal.com |
| Google Fonts | Website typography | IP address (browser request) | google.com |
| HuggingFace | Model hosting and distribution | None (public model card only) | huggingface.co |
We do not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.
This website does not use first-party cookies for analytics or tracking. Google Fonts may cause your browser to store a connection cache entry — this is a browser-level behaviour outside our control and does not constitute user tracking on our part.
The EcomIntent API itself does not set cookies.
If you use a browser extension or third-party tool that sets cookies when visiting our site, those are not controlled by us.
EcomIntent is operated from the United States. If you are located outside the US, your data is transferred to and processed in the US.
EU/UK users: We rely on Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Agreement (IDTA) for transfers of personal data from the EEA or UK to the US. Our sub-processors (Cloudflare, Modal.com, RapidAPI) maintain appropriate transfer mechanisms. Copies of applicable SCCs are available on request.
Depending on where you are located, you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Ask us to limit how we process your data in certain circumstances.
Object to processing based on legitimate interest.
Withdraw consent for opt-in data processing at any time.
Lodge a complaint with your local data protection authority.
To exercise any of these rights, email [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving your request.
California residents have the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights. To submit a request, email [email protected] with "California Privacy Request" in the subject line.
If you are located in the European Economic Area or United Kingdom, you have the right to lodge a complaint with your national supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. The UK supervisory authority is the Information Commissioner's Office at ico.org.uk.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:
No method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by law.
The EcomIntent Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child under 16, please contact us immediately at [email protected].
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, for registered API customers, by email at least 14 days before changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Email: [email protected]
Controller: John Bolognino
We aim to respond to all privacy requests within 30 days. For CCPA requests, include "California Privacy Request" in your subject line.