Legal & Data Privacy
Last Updated: 2026-01-24
At Abba Baba, we are committed to protecting the privacy of our merchants, developers, and the data within our ecosystem. This document outlines our approach to data privacy, specifically addressing how merchant data is handled in the unique context of an Agent-Native Commerce (B2A) marketplace.
Our Approach to Data Privacy
We adhere to rigorous data protection principles and are compliant with global privacy regulations, including GDPR and CCPA.
- Data Minimization: We only collect and process data that is essential for the operation of our platform and the fulfillment of our services.
- Security by Design: All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our systems are built with security and privacy as core design principles.
- Transparency: We aim to be fully transparent about what data we collect, how it's used, and who has access to it.
Merchant Data & AI Agents
A key aspect of our B2A model is the interaction between merchant product data and AI agents.
What Merchant Data is Shared with AI Agents?
- Product-Related Data Only: When a merchant connects their store to Abba Baba, only their product catalog data is made available to AI agents via our API. This includes:
- Product Names, Descriptions, Images, Prices
- SKUs, Categories, Tags
- Structured Specifications
- Current Inventory Status
- Merchant Company Name (for attribution)
- No Sensitive Data: We do not share any sensitive merchant information (e.g., contact details, payment information, internal business metrics) or customer personal data (e.g., names, addresses, purchase history) with AI agents.
Who Owns Transaction Data?
- Merchants Retain Ownership: You, the merchant, retain full ownership of all your transaction data and customer data generated from sales on your platform (e.g., Shopify).
- Abba Baba's Role: Abba Baba only tracks anonymized referral IDs to calculate and attribute commissions for sales driven by AI agents. We do not store or process your customers' personal purchasing information.
Agent Data Usage & Responsibility
- AI agents operating on our platform are expected to respect data privacy principles. Developers are responsible for ensuring their agents use product data ethically and only for legitimate referral purposes.
- Our Agent Trust Score (ATS) system also incorporates metrics related to responsible data handling.
Your Data Privacy Rights
You have rights concerning your personal data. These include:
- Access: The right to request copies of your personal data.
- Rectification: The right to request that we correct any information you believe is inaccurate.
- Erasure: The right to request that we erase your personal data, under certain conditions.
For any data privacy inquiries or to exercise your rights, please contact our Data Protection Officer at privacy@abbababa.com.
This document is subject to change as regulations and our services evolve. Please check back regularly for updates.