Legal

Privacy Policy

Last updated 26 September 2026

Elevox is an AI shopping assistant that online stores add to their websites. It is made by Tecsync Oy. This policy explains what personal data we process, why, where it is stored and what rights you have.

Who is responsible depends on who you are:

• Shoppers who use the assistant in an online store: the store is the controller of your data. We process it on the store's behalf as its processor. Section 3 describes what that involves.
• Merchants who use Elevox, and visitors to elevox.io: Tecsync Oy is the controller.

1. Contact

Tecsync Oy, business ID 3201898-5
Seilitie 1 A 8, 90510 Oulu, Finland
Email: hello@elevox.io

Privacy contact: Atte Hautamäki, hello@elevox.io

2. Visitors to elevox.io

Demo requests. When you ask for a demo, we receive your name, email address and store address, plus the page you sent the form from. We use them to build your demo and reply to you. The legal basis is taking steps at your request before a possible contract, and our legitimate interest in responding to business enquiries. We keep these details for up to two years after our last contact with you, unless you become a customer.

Technical data. Our hosting provider processes your IP address and browser details to deliver the site and keep it secure. The site loads fonts from Google Fonts and example images from Unsplash, so those services receive your IP address when the page loads.

Cookies. elevox.io sets no cookies and uses no analytics or advertising trackers.

3. Shoppers using Elevox in an online store

The online store you are visiting decides to use Elevox and is responsible for your data. We process it only to run the assistant for that store. For anything about your rights, you can contact the store, or us, and we'll pass the request to the store.

What is processed

• Your conversation: the messages you write, the products the assistant shows you and what you choose.
• Browsing context in the store: the types of pages and products you looked at during your visit, the site you came from (its domain only) and what is in your cart. This helps the assistant suggest relevant products.
• Contact details you give: if you ask to be contacted by the store, your name, email address or phone number, and your question. These go to the store by email together with the recent conversation.
• Order details: if you ask about an order, we first send a one-time code to the email address on the order. After you confirm the code, the assistant fetches the order's status, tracking and product names from the store and shows them to you.
• Photos and voice: photos you attach and voice messages you record are sent to the AI service to answer you. We don't store them.

Stored in your browser

The assistant keeps your recent conversations, a few details you mentioned (such as a size) and your theme preference in your browser's local storage, so the conversation continues when you move between pages. It also keeps the current visit's page trail in session storage, which is cleared when you close the tab. Elevox sets no cookies, has no advertising trackers and doesn't follow you across different stores.

What we don't do

• We don't sell personal data or use it for advertising.
• We don't use shopper conversations to train AI models.
• We don't build profiles of shoppers across stores.

How long it is kept

Conversations are deleted automatically 90 days after the last message. The store can ask us to delete a shopper's conversations sooner. We keep anonymous counts, such as the number of conversations per month, for billing and statistics.

Please don't share sensitive information, such as health information, passwords or card numbers, in the chat.

4. Merchants

When your store uses Elevox, we process:

• your store's address and platform, and the settings of your assistant
• the names and email addresses of the people who manage the assistant and receive conversations handed over from it
• information published on your store's website, such as products, prices, delivery terms and contact details, which the assistant uses to answer shoppers
• billing details, and messages between you and us

The legal basis is our contract with you, and our legitimate interest in supporting and improving the service. We keep this data while you use Elevox. After you uninstall the app or the contract ends, we delete your store's data within 30 days, except records we must keep under the Finnish Accounting Act.

If you install Elevox from the Shopify App Store, Shopify shares your store's details with us under Shopify's own terms, and handles the billing.

5. Service providers we use

We use the following providers to run Elevox. They process personal data only on our instructions.

OpenAI and Anthropic don't use data sent through their business APIs to train their models. They may keep it for a limited time, usually up to 30 days, for security and abuse monitoring.

We will update this list before we add a new provider that processes shoppers' personal data.

6. Transfers outside the EU

Some providers above are based in the United States, so personal data may be transferred outside the EU and EEA. We rely on the EU–U.S. Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses otherwise.

7. Your rights

You have the right to:

• access the personal data we hold about you
• have incorrect data corrected, or your data deleted
• object to processing or ask us to restrict it
• receive data you gave us in a machine-readable format
• withdraw your consent where processing is based on consent
• complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the authority in your own country

Send requests to hello@elevox.io. We may ask you to confirm your identity first. If you are a shopper, we'll handle the request together with the store, because the store is responsible for your data.

8. Security

Connections to Elevox are encrypted. Data is stored with providers that encrypt it at rest. Only people who need it for their work can access personal data. Contact details given through the handover form are stored in a form that doesn't reveal them.

9. Changes

We may update this policy as Elevox develops. We'll change the date at the top, and tell merchants by email about significant changes.