Here is what happens to your shoppers' information when they chat with Bolt, and what you can see.
Order details need proof
A shopper who is not signed in gives the email address on the order. Bolt emails a one-time code to that address. The code lasts 10 minutes and allows five tries. Bolt looks up the order only after the shopper enters the code, so an order number on its own is not enough. This code email is the only email GoBolt sends to a shopper.
Signed-in shoppers depend on your platform:
Shopify. A shopper who is signed in to your store can see their own orders without a code, because Shopify signs the request that says who they are.
WooCommerce. The same, using a short-lived proof that your store signs.
Ecwid. There is no shortcut. An Ecwid storefront cannot prove who is asking, so every shopper uses the emailed code.
What you can see about a conversation
Every storefront conversation is kept, and you can read it in GoBolt → Chats. Chats shows when it started and the IP address it came from. If the shopper was signed in to your store, their name or email can show too. Otherwise there is no name or email. If a shopper asks, tell them plainly that the store can read the chat.
What Bolt shows you about customers
In WhatsApp or Telegram, ask about a customer by name. Bolt answers with their name, how many orders they placed and how much they spent, in your store's currency. It does not show an email address, phone number or address, and it refuses a search by email address or phone number. This holds on Shopify, WooCommerce and Ecwid.
What Bolt does not do
Bolt does not message your shoppers on its own, and it does not send bulk messages. See What Bolt deliberately doesn't do.
Store Radio listening
Store Radio sends plays and other station actions to GoBolt for its listening figures. These first-party events are still sent with Global Privacy Control or Do Not Track, or when optional analytics consent is refused.
Optional analytics in PostHog is separate. It receives station openings and copies of recorded plays and add-to-cart taps. Its event details contain the platform, the clip where applicable and the language, not the shopper’s name, email, IP address or cart. This optional analytics copy is never sent with Global Privacy Control or Do Not Track, and each platform’s own consent also applies. See Turn on Store Radio.
More
Our privacy policy lists what GoBolt collects and why: gobolt.app/privacy. For how Bolt answers, see What data does the assistant use?.
Still stuck? Open Get help in GoBolt, or email [email protected].