Privacy Policy

Last updated: March 29, 2026

What this app is

Commerce Changeset is a demonstration application built for the Authorized to Act: Auth0 for AI Agents hackathon. It is not a production service. It demonstrates multi-agent orchestration with Auth0 Token Vault, CIBA approval flows, and stress-aware authorization.

What data we collect

When you log in, Auth0 manages your authentication session. The app receives your name and email address from your Auth0 profile. If you connect a Google account via Auth0 Connected Accounts, Auth0 stores your Google refresh token in Token Vault — this app never sees or stores that token directly.

How data flows

Agents act on your behalf through Auth0's On-Behalf-Of delegation. At execution time, each agent requests a scoped access token from Token Vault to read or write Google Sheets data or send Gmail messages. The token exchange is recorded in the execution receipt. Your Google credentials are stored by Auth0, not by this application.

What agents can do

  • Reader: Read product data, pricing, and schedules from Google Sheets (read-only)
  • Writer: Update prices, toggle promotions, modify inventory flags, and create products in Google Sheets
  • Notifier: Send execution summary and receipt emails via Gmail

All write operations require your explicit approval via CIBA Guardian push notification before execution.

Data retention

This is a demo application. Your Auth0 session is managed by Auth0 and expires according to your tenant settings. Chat history is stored in your browser's localStorage and can be cleared at any time. No server-side database stores your conversations or changeset history.

Analytics and tracking

This app does not use analytics, tracking pixels, advertising, or third-party data collection of any kind.

Disconnecting your account

You can disconnect your Google account from Auth0 Connected Accounts at any time through your Auth0 account settings. This revokes the stored refresh token and immediately removes the agents' ability to act on your behalf.

Contact

Questions or concerns? Open an issue on the GitHub repository.