kobyThese terms are an agreement between Bluemoon ("we", "us") and the merchant who installs the Koby app or creates a company in Koby ("you"). If you accept them for a business, you confirm you may bind that business.
They apply when you install the app in your Shopify store or create an account. Our privacy policy explains what data Koby handles. Questions can go to support@agentkoby.com.
Koby is a workspace for commerce teams. It builds and edits pages and funnels, publishes them to your store or hosts them on your own domain, and, on plans with the data layer, reads orders and visits so you can see revenue and which funnel earned it.
We work to keep Koby available and correct, but we provide it as it is. AI output can contain mistakes. You check what Koby makes before you publish it.
Koby is billed through Shopify, per connected store. You choose a plan in your Shopify admin. Shopify shows the price, any trial and the billing period before you approve it, and charges it on your Shopify invoice. The plans are:
Start: 10 funnels per billing period. No order sync or analytics.
Pro: 100 funnels per billing period. No order sync or analytics.
Data: Order sync, refunds, the tracking pixel, attribution and analytics. No funnels.
Pro + data: 100 funnels per billing period, plus order sync, refunds, the tracking pixel, attribution and analytics.
You can change or cancel your plan in your Shopify admin. Shopify applies a change under its own billing rules. A cancelled plan ends at the end of its billing period. What a plan includes may change; we tell you before a change takes effect.
Each plan with funnels includes an AI allowance per billing period. AI use beyond that allowance is billed through Shopify as a usage charge, on the same Shopify invoice.
Usage charges only start when an owner of your company allows paid overage and sets a ceiling. Koby stops AI work at that ceiling. Without that permission the ceiling is zero and Koby stops when the allowance is used.
You may not use Koby to break the law, to infringe the rights of others, to publish misleading or unsafe claims about products, to sell products that Shopify or the law does not allow, to send spam, or to attack, overload or probe Koby or anyone else.
You may not resell access to Koby, share accounts between people, or try to reach data of another company. Each person signs in with their own account.
We may suspend a store, a page or an account that breaks these rules, and tell you why.
You keep all rights to the pages, images, texts, source links and instructions you put into Koby and to what Koby makes for you. You give us the right to store, process and show that content only to run Koby for you.
You are responsible for your pages and products: their claims, prices, product information, legal notices and policies, and the rights to the images and texts you use. You confirm you may use what you upload or ask Koby to copy.
Koby shows no consent banner on hosted funnels. Measuring starts when a page loads, and a browser that sends Global Privacy Control is not measured. You are responsible for your own legal basis for measuring your visitors, for any advertising pixel you add, and for what your own privacy policy tells them.
For the people who use Koby and for their accounts, Bluemoon decides how data is used, as the privacy policy explains. For the visitors and customers of your store and funnels, you decide and Koby processes that data on your behalf. In that role you are the controller and we are your processor. This section is our data processing agreement with you.
What we process: orders with their line items, amounts, refunds and the source of the visit, and visit events from your funnels and your store, with a random session number. Koby keeps no column for a customer's name, address, email, phone number or customer number. We process it only to provide Koby to you: syncing orders, attribution and analytics.
Instructions: we process this data only on your documented instructions, which are these terms, your settings in Koby and what you ask Koby to do. If we are required by law to do otherwise, we tell you first unless the law forbids that. If we think an instruction breaks data protection law, we tell you.
Confidentiality: only people who need access to run Koby have it, and they are bound to keep the data confidential.
Security: data is encrypted in transit (TLS) and at rest. Store access tokens are encrypted separately. Each company's data is separated in the database by row security, people only reach the companies they belong to, and roles limit what each person can do. Access to production systems is limited to the people who run Koby.
Subprocessors: Supabase runs the database and sign-in. Cloudflare stores files, serves hosted funnels and handles custom domains. Shopify is the source of store and order data and of billing. Anthropic and OpenAI process text and images when you ask Koby to build or edit something. Our own servers run the app and its background work. You agree that we use them. They are bound to protect the data at least as well as these terms ask. We tell you before we add or replace a subprocessor, so you can object; if we cannot meet your objection you may end the service. Some of them process data outside the European Economic Area; we rely on the European Commission's standard contractual clauses or an adequacy decision for that.
Data subject requests: Shopify passes on your customers' data and deletion requests through its privacy webhooks. Koby handles them: a data request appears in your Connections screen with its deadline and a file to hand over, and a deletion request removes that customer's orders and linked browser events, including those from hosted funnels. We help you with other requests, impact assessments and questions from a supervisory authority where they concern Koby.
Breaches: if we become aware of a personal data breach affecting your data, we tell you without undue delay, with what we know about what happened, the data involved and what we do about it, so you can meet your own duty to report.
Retention: Raw browser events: 90 days. Totals per minute, hour and day: 13 months. Orders and refunds: 13 months. Incoming Shopify messages: 7 days after they are handled, or sooner when a redaction reaches them. Customer data exports: 30 days.
At the end of the service: When you uninstall the app, Koby deletes the access token at once and stops collecting from that store. When Shopify asks for the shop's data to be deleted, which it does 48 hours after an uninstall, its orders, events and exports are deleted. When a customer is deleted, a one-way hash of their identifier stays, so that the same data does not come back later.
Audits: on request we give you the information you need to show that these duties are met. Ask support@agentkoby.com.
Nothing in these terms limits liability that the law does not allow to be limited, such as for intent or gross negligence.
Otherwise our total liability to you under these terms, including the data processing section, is limited to what you paid for Koby through Shopify in the 12 months before the event. We are not liable for indirect damage, such as lost profit, lost revenue or lost data you could have kept yourself.
You are liable for your content and your pages and hold us harmless against claims about them.
You can end the service at any time by uninstalling the app from your Shopify admin. Your plan then stops through Shopify, and the deletion described under Data processing follows.
To also have your company, its pages and its accounts deleted, email support@agentkoby.com. We do that within 30 days.
We may end the service for you with 30 days notice, or at once if you seriously break these terms.
If these terms change we update this page and the date below, and for important changes we tell you in Koby before they take effect. If you keep using Koby after that, the new terms apply.
These terms are governed by the law of the Netherlands. Disputes go to the competent court in the Netherlands, unless the law gives you a right to another court.
See also the privacy policy. Last updated 6 November 2026