Privacy Policy

1. Scope

This Privacy Policy applies to information processed through StoreVoice AI websites, demos, forms, account workflows, plugin functionality, hosted services, integrations, voice agents, call handling workflows, support channels, analytics, and related products or services that link to or reference this Policy.

This Policy does not apply to third-party websites, platforms, applications, payment processors, carriers, hosting providers, WooCommerce, WordPress, or other services that are not operated by StoreVoice AI. Those services are governed by their own privacy notices and terms.

2. Our Privacy Roles

StoreVoice AI may process information in different roles depending on the context.

• Merchant-controlled customer data. When a merchant connects WooCommerce data, call data, customer support content, store policies, or other End User information to the Service, the merchant generally determines the purposes and means of that processing. In that context, StoreVoice AI generally acts as a service provider, processor, or similar role under applicable privacy laws.
• StoreVoice AI business data. When we process information for our website, sales, demos, billing, account administration, security, analytics, product improvement, support, compliance, or business operations, StoreVoice AI generally acts as an independent controller or business.

If you are an End User of a merchant using StoreVoice AI, please contact the merchant directly for questions about that merchant's privacy practices, store policies, customer account data, orders, returns, or support records.

3. Information We Collect

Account and business contact information

We may collect names, business names, job titles, email addresses, phone numbers, billing contacts, addresses, account credentials, account settings, plan selections, communications, and information submitted through demo, lead, support, or contact forms.

Store and integration information

When a merchant connects a store or configures the Service, we may process store names, URLs, WordPress and WooCommerce configuration details, plugin settings, integration tokens, API connection details, product catalog information, product availability, prices, product attributes, order status information, shipping information, return and refund policy content, FAQs, knowledge base content, and support workflow instructions.

Call, voice, and support interaction information

Depending on merchant configuration, we may process caller phone numbers, call metadata, call recordings, audio snippets, transcripts, summaries, detected intent, language, sentiment or topic classifications, customer questions, order lookup details, support outcomes, escalation notes, agent responses, and quality or safety review signals.

Technical, usage, and device information

We may collect IP addresses, device identifiers, browser type, operating system, referring URLs, pages viewed, features used, timestamps, log files, diagnostic data, error reports, performance metrics, approximate location derived from IP address, authentication events, security events, and other information about interactions with the Service.

Payment and transaction information

Payment processing may be handled by third-party payment processors. We may receive transaction identifiers, subscription status, invoice details, billing address, tax information, payment status, plan level, and limited payment metadata. We do not intend to store full payment card numbers on our own systems.

4. Merchant Customer Data

Merchants choose what information to connect to the Service and how the AI voice agent is configured. Merchant Customer Data may include personal information about End Users, including order numbers, names, email addresses, phone numbers, shipping addresses, purchase history, order status, return requests, refund questions, product preferences, support questions, call content, transcripts, and other store-related information.

Merchants are responsible for providing required privacy notices, obtaining required consents, responding to End User privacy requests, configuring appropriate data access, limiting data sent to the Service, and ensuring that their use of StoreVoice AI complies with privacy, consumer protection, call recording, telecommunications, and ecommerce laws that apply to their business.

5. Sources of Information

We may collect information from the following sources:

• Directly from merchants, account users, website visitors, demo requesters, and support contacts.
• From connected WooCommerce, WordPress, ecommerce, support, telephony, analytics, payment, shipping, or business systems.
• From End Users who call, speak with, or otherwise interact with a StoreVoice AI-powered support workflow.
• Automatically from browsers, devices, servers, cookies, pixels, logs, and similar technologies.
• From service providers, business partners, public sources, and third-party tools used for security, analytics, billing, sales, support, and operations.

6. How We Use Information

We use information for the purposes described below, subject to applicable law and any written agreement with a merchant:

• Provide, operate, host, maintain, secure, and support the Service.
• Connect WooCommerce, WordPress, telephony, knowledge base, payment, shipping, support, and related integrations.
• Answer customer calls, understand caller intent, retrieve relevant store information, generate AI voice responses, produce transcripts or summaries, and route escalations.
• Configure and personalize the Service according to merchant instructions, plan level, store content, policies, and support workflows.
• Process subscriptions, invoices, taxes, payments, plan limits, account administration, and customer support requests.
• Monitor performance, debug issues, prevent abuse, detect fraud, maintain security, enforce terms, and protect rights and safety.
• Improve reliability, product quality, user experience, AI safety, speech performance, and support quality.
• Communicate about demos, onboarding, product updates, security notices, policy changes, billing, support, and administrative matters.
• Comply with legal obligations, law enforcement requests, court orders, regulatory requirements, and enforceable contractual obligations.
• Create aggregated or de-identified information that does not reasonably identify a particular merchant, End User, or individual.

7. AI, Voice, and Transcription Processing

The Service may use speech recognition, text-to-speech, natural language processing, large language models, retrieval systems, classifiers, summarization, analytics, and related AI technologies to power customer support conversations. These systems may process audio, transcripts, prompts, product data, order data, policy content, and support context to understand requests and generate responses.

Depending on configuration and applicable agreements, information may be used to monitor quality, troubleshoot errors, evaluate safety, prevent abuse, improve prompts, improve service performance, or develop product features. Where Customer Data is processed on behalf of a merchant, we process it according to merchant instructions, applicable law, and any governing data processing terms.

Merchants should configure the Service to avoid collecting sensitive information unless necessary and lawful. Merchants should also provide appropriate disclosures to callers and obtain required consents for call recording, transcription, AI assistance, automated support, and data processing.

8. Legal Bases

Where privacy laws require a legal basis for processing personal information, our legal bases may include:

• Contract. To provide the Service, process subscriptions, support accounts, and perform obligations under agreements with merchants.
• Legitimate interests. To operate, secure, improve, market, and support the Service; prevent fraud and abuse; communicate with business contacts; and protect our rights and users, provided those interests are not overridden by applicable rights.
• Consent. Where required for marketing communications, cookies, call recording, AI disclosures, or other processing activities.
• Legal obligations. To comply with tax, accounting, corporate, regulatory, law enforcement, court, and other legal requirements.
• Merchant instructions. When we process Merchant Customer Data as a processor or service provider, we rely on the merchant's instructions and the merchant's applicable legal basis.

9. How We Disclose Information

We may disclose information in the following circumstances:

• Service providers. To vendors and subprocessors that provide hosting, infrastructure, AI, speech, telephony, analytics, security, payment, billing, customer support, communications, sales, and operational services.
• Merchant-directed disclosures. To systems, users, integrations, or recipients configured or authorized by the merchant, including WooCommerce, WordPress, support tools, shipping tools, CRM systems, phone systems, or human support teams.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction involving StoreVoice AI.
• Legal and safety purposes. To comply with law, respond to lawful requests, enforce agreements, protect rights, investigate abuse, prevent fraud, maintain security, or protect StoreVoice AI, merchants, End Users, or the public.
• Professional advisors. To lawyers, auditors, accountants, insurers, banks, and other professional advisors where reasonably necessary.
• Aggregated or de-identified data. We may disclose aggregated or de-identified information that does not reasonably identify a particular person.

We do not sell personal information in the traditional sense of exchanging it for money. Some privacy laws define "sale" or "sharing" broadly, including certain analytics or advertising activities. Where required, we will provide applicable opt-out mechanisms.

10. Service Providers and Subprocessors

We use third-party service providers to operate the Service. These providers may process information only as reasonably necessary to perform services for us or as otherwise permitted by applicable law and contract. Categories of service providers may include cloud hosting, database, storage, monitoring, security, AI model, speech-to-text, text-to-speech, telephony, email, analytics, payment processing, billing, customer support, and business operations providers.

Because our provider list may change as the Service evolves, merchants that require subprocessor details or prior notice of material subprocessor changes should contact us through the contact page or review any applicable data processing agreement.

11. Cookies and Analytics

Our website and Service may use cookies, pixels, tags, local storage, log files, and similar technologies to operate the website, remember preferences, analyze traffic, understand product usage, measure campaign performance, maintain security, and improve the Service.

You can often control cookies through browser settings. If you disable cookies, some website or Service features may not function correctly. Where required by law, we will request consent for non-essential cookies or provide other required cookie controls.

12. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, support security, prevent abuse, maintain business records, and fulfill the purposes described in this Policy.

Retention periods vary depending on the type of information, account settings, merchant instructions, plan terms, legal requirements, operational needs, and risk considerations. For example, call recordings, transcripts, logs, billing records, support records, and security records may have different retention periods.

Where we process Merchant Customer Data as a processor or service provider, deletion or return of that data is handled according to merchant instructions, product functionality, applicable law, and any data processing agreement.

13. Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include access controls, encryption where appropriate, authentication controls, logging, monitoring, vendor review, least-privilege practices, and operational security procedures.

No method of transmission, processing, or storage is completely secure. Merchants are responsible for securing their own WooCommerce stores, WordPress installations, plugins, themes, hosting environments, administrative accounts, credentials, API keys, phone workflows, and user permissions.

14. International Transfers

StoreVoice AI is operated from the United States, and information may be processed in the United States and other countries where we or our service providers operate. These countries may have privacy laws that differ from the laws where you or End Users are located.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms. Merchants are responsible for ensuring that their use of the Service supports any transfer requirements that apply to their End Users and business operations.

15. Privacy Rights

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or opt-out of certain processing. These rights may be subject to limitations, verification requirements, exceptions, and the nature of our role.

If you are a merchant account holder, website visitor, demo requester, or business contact, you may submit privacy requests through the StoreVoice AI contact page. If you are an End User of a merchant, please contact the merchant directly because the merchant usually controls the relevant customer, order, call, and support data.

We may need to verify your identity and authority before responding to a request. We will not discriminate against individuals for exercising privacy rights where prohibited by law.

16. Regional Privacy Notices

United States state privacy laws

Residents of certain U.S. states may have rights to access, delete, correct, or obtain a copy of personal information; opt out of certain targeted advertising, sales, or profiling; and appeal denied requests. The categories of personal information we may collect include identifiers, commercial information, internet or electronic activity information, audio information, professional or business contact information, geolocation approximations derived from IP address, and inferences related to product usage or support interactions.

We use and disclose those categories for the purposes described in this Policy. We do not knowingly sell personal information for money. If applicable law treats certain analytics or advertising activities as a sale or sharing, we will honor legally required opt-out rights.

European Economic Area, United Kingdom, and Switzerland

Where the GDPR, UK GDPR, or Swiss data protection law applies, individuals may have rights to access, rectify, erase, restrict, object to processing, receive data portability, withdraw consent, and lodge a complaint with a supervisory authority. Where we process Merchant Customer Data as a processor, we will assist the merchant as required by applicable data processing terms.

17. Children's Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children under 13 or the age at which parental consent is required under applicable law. Merchants must not configure the Service to knowingly collect personal information from children unless they have obtained all required permissions and have a lawful basis to do so.

18. Automated Decisions

The Service may use automated systems to classify caller intent, retrieve store information, generate responses, summarize calls, route support requests, or identify issues for merchant review. StoreVoice AI is designed to support customer service workflows, not to make legally binding or similarly significant decisions about individuals without merchant oversight.

Merchants are responsible for configuring human review, escalation, and override procedures for decisions that may materially affect customers, including refunds, cancellations, eligibility determinations, complaints, disputes, high-value orders, or sensitive requests.

19. Third-Party Links and Integrations

The Service may link to or integrate with third-party services, including WooCommerce, WordPress, payment processors, shipping providers, telephony providers, AI infrastructure providers, analytics tools, and support systems. We are not responsible for the privacy practices, security, availability, or content of third-party services.

Merchants should review the terms and privacy notices of third-party services before connecting them to StoreVoice AI or making End User data available through those services.

20. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, technology, legal requirements, data practices, or business operations. If we make material changes, we will provide notice by posting the updated Policy on the website or through another reasonable method.

The updated Policy will be effective as of the effective date stated above unless a different date is provided. Continued use of the Service after an update means the updated Policy applies to subsequent processing of information.

21. Contact

Questions, requests, or concerns about this Privacy Policy may be submitted through the StoreVoice AI contact page at https://storevoiceai.com/contact.

Kanzu Code Inc.
2035 Sunset Lake Rd Ste B2
Newark, Delaware 19702
United States