Every store owner reaches this thought at some point during setup, right after clicking "install" and right before granting permissions, a brief hesitation about what exactly this thing can now see and do with your business. It's a completely reasonable question, and honestly, one more people should ask before installing anything, not just AI tools that touch customer conversations and order data.
This one's a straightforward answer to that hesitation, what real access an AI Employee like Anna, Maya, or Oscar actually needs, what happens to the data once it's accessed, and what stays firmly under your control the entire time, no matter how automated things get.
A lot of software gets installed with permissions clicked through quickly, without much thought given to what's actually being granted in the process. AI tools raise the stakes a little, since they're reading and acting on customer conversations, order data, and store information in order to function at all. That's not a reason to avoid them entirely, it's a reason to actually understand what's happening before you commit to anything.
To do their jobs properly, Anna, Maya, and Oscar need visibility into different slices of your store's data, customer conversations and order history for Anna, product catalogue information for Maya, and stock and sales data for Oscar. None of this is unusual for a platform built to genuinely automate these functions well, the question that actually matters isn't whether access is needed, it's what happens to that data once it's been accessed.
Yep AI relies on encrypted data handling, meaning your store's information is processed securely rather than passed around in an exposed, readable format anyone could intercept. Just as importantly, your data and customer interactions are not shared publicly or with third parties without your consent, and where external AI technology providers are involved in the background, reasonable safeguards are applied to protect that information, as outlined clearly in Yep AI's privacy policy.
Access doesn't mean the AI operates unchecked or makes decisions on its own without oversight. You decide which AI Employees are active on your store, define the brand voice they use, customize how they respond to different situations, and set the boundaries for how they interact with your customers. If a situation is genuinely complex or sensitive, it gets escalated to your team rather than resolved automatically, keeping human judgment in the loop exactly where it actually matters.
If it helps, treat it less like handing over your store's keys, and more like hiring a new team member with a clearly defined job description, they get access to what their specific role requires, nothing more, and you're still the one who sets the rules, reviews the work when needed, and steps in whenever something genuinely needs a human decision instead of an automated one.
Can an AI Employee access things outside its role, like my payment settings?
No, each AI Employee's access is scoped to what its specific role requires, support and sales data for Anna, catalogue data for Maya, and stock and sales data for Oscar.
Is my customer data shared with anyone else?
No, your store data and customer interactions remain private and are not shared publicly or with third parties without your consent.
What if I only want one AI Employee active, not all three?
That's entirely your choice, you control which AI Employees are active on your store at any given time.
Does the AI make final decisions on sensitive customer issues?
No, complex or sensitive situations are escalated to your team rather than resolved automatically.
Is this covered anywhere official, or just marketing language?
Yes, the specifics are outlined in Yep AI's privacy policy, which covers exactly how data is handled and protected.
Reading about it only goes so far, the real reassurance comes from actually seeing the controls yourself, on your own store, before making any real commitment. Install Yep AI from the Shopify App Store and try it free for 14 days, no credit card needed, so you can explore exactly what access looks like before deciding it's right for you. Or read the full privacy policy first if you'd rather dig into the details.