Legal

Privacy Policy

Last updated 2 October 2026

Elevox is an AI shopping assistant that online stores add to their websites. It is made by Tecsync Oy. This policy explains what personal data we process, why, where it is stored and what rights you have.

Who is responsible depends on who you are:

• Shoppers who use the assistant in an online store: the store is the controller of your data. We process it on the store's behalf as its processor. Section 3 describes what that involves.
• Merchants who use Elevox, and visitors to elevox.io: Tecsync Oy is the controller.

1. Contact

Tecsync Oy, business ID 3201898-5
Seilitie 1 A 8, 90510 Oulu, Finland
Email: hello@elevox.io

Privacy contact: Atte Hautamäki, hello@elevox.io

2. Visitors to elevox.io

Demo requests. When you ask for a demo, we receive your name, email address and store address, plus the page you sent the form from. We use them to build your demo and reply to you. The legal basis is taking steps at your request before a possible contract, and our legitimate interest in responding to business enquiries. We keep these details for up to two years after our last contact with you, unless you become a customer.

Technical data. Our hosting provider processes your IP address and browser details to deliver the site and keep it secure. The site loads fonts from Google Fonts and example images from Unsplash, so those services receive your IP address when the page loads.

Instant demo. When you enter a store address to try Elevox, we read only what that store already publishes (its products, prices, categories and public pages), ask an AI model to set up the assistant, and record a first sample conversation. The prepared demo is kept with the store's address for up to 90 days so later visitors see the same one. Questions you type into the demo are sent to our AI provider to answer them and appear in our server logs. Please don't type personal information into the demo chat.

Demo link by email. If you leave your email address while the demo is being prepared, we email you the link when it is ready and may contact you about your demo. We keep the address like a trial request (see below).

Trial requests. When you start a free trial or ask to be told when your platform is supported, we receive your email address, your store address and the plan you picked. We use them to set up your trial and contact you about it. The legal basis is taking steps at your request before a possible contract. We keep these details for up to two years after our last contact with you, unless you become a customer.

Visit statistics. Our server counts the steps of a visit, such as opening the page, entering a store address, viewing the demo and starting a trial, together with the campaign parameters in the page address (for example utm_source) and whether you use a phone or a computer. A random visit ID that exists only while the page is open links these steps. We store no IP address for this, and nothing is saved on your device. The legal basis is our legitimate interest in knowing which of our pages and campaigns work.

Cookies. elevox.io sets no cookies and stores nothing in your browser, and uses no third-party analytics or advertising trackers.

3. Shoppers using Elevox in an online store

The online store you are visiting decides to use Elevox and is responsible for your data. We process it only to run the assistant for that store. For anything about your rights, you can contact the store, or us, and we'll pass the request to the store.

What is processed

• Your conversation: the messages you write, the products the assistant shows you and what you choose.
• Browsing context in the store: the types of pages and products you looked at during your visit, the site you came from (its domain only) and what is in your cart. This helps the assistant suggest relevant products.
• Contact details you give: if you ask to be contacted by the store, your name, email address or phone number, and your question. These go to the store by email together with the recent conversation.
• Order details: if you ask about an order, we first send a one-time code to the email address on the order. After you confirm the code, the assistant fetches the order's status, tracking and product names from the store and shows them to you.
• Photos and voice: photos you attach and voice messages you record are sent to the AI service to answer you. We don't store them.
• Orders in the visit: in WooCommerce stores that turn on order reporting, the order number, total and currency of an order placed during a visit in which you opened the assistant. No name, address or product details are sent.

Stored in your browser

The assistant keeps your recent conversations, a few details you mentioned (such as a size) and your theme preference in your browser's local storage, so the conversation continues when you move between pages. It also keeps the current visit's page trail in session storage, which is cleared when you close the tab. In WooCommerce stores that turn on order reporting, opening the assistant also sets a flag in the store site's session storage, so the store can count orders from visits in which the assistant was used. If the store asks for statistics consent, the flag is set only after you give it, and it is cleared when you close the tab. Elevox sets no cookies, has no advertising trackers and doesn't follow you across different stores.

What we don't do

• We don't sell personal data or use it for advertising.
• We don't use shopper conversations to train AI models.
• We don't build profiles of shoppers across stores.

How long it is kept

Conversations are deleted automatically 90 days after the last message. The store can ask us to delete a shopper's conversations sooner. We keep anonymous counts, such as the number of conversations per month, for billing and statistics.

Please don't share sensitive information, such as health information, passwords or card numbers, in the chat.

4. Merchants

When your store uses Elevox, we process:

• your store's address and platform, and the settings of your assistant
• the names and email addresses of the people who manage the assistant and receive conversations handed over from it
• information published on your store's website, such as products, prices, delivery terms and contact details, which the assistant uses to answer shoppers
• if you turn on order reporting in the WooCommerce plugin: the number, total and currency of orders placed during visits in which a shopper opened the assistant
• billing details, and messages between you and us

The legal basis is our contract with you, and our legitimate interest in supporting and improving the service. We keep this data while you use Elevox. After you uninstall the app or the contract ends, we delete your store's data within 30 days, except records we must keep under the Finnish Accounting Act.

If you install Elevox from the Shopify App Store, Shopify shares your store's details with us under Shopify's own terms, and handles the billing.

5. Service providers we use

We use the following providers to run Elevox. They process personal data only on our instructions.

OpenAI and Anthropic don't use data sent through their business APIs to train their models. They may keep it for a limited time, usually up to 30 days, for security and abuse monitoring.

We will update this list before we add a new provider that processes shoppers' personal data.

6. Transfers outside the EU

Some providers above are based in the United States, so personal data may be transferred outside the EU and EEA. We rely on the EU–U.S. Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses otherwise.

7. Your rights

You have the right to:

• access the personal data we hold about you
• have incorrect data corrected, or your data deleted
• object to processing or ask us to restrict it
• receive data you gave us in a machine-readable format
• withdraw your consent where processing is based on consent
• complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the authority in your own country

Send requests to hello@elevox.io. We may ask you to confirm your identity first. If you are a shopper, we'll handle the request together with the store, because the store is responsible for your data.

8. Security

Connections to Elevox are encrypted. Data is stored with providers that encrypt it at rest. Only people who need it for their work can access personal data. Contact details given through the handover form are stored in a form that doesn't reveal them.

9. Changes

We may update this policy as Elevox develops. We'll change the date at the top, and tell merchants by email about significant changes.