Legal

Privacy Policy

Effective date · July 5, 2026

Avondia (“Avondia”, “we”, “us”) provides Avondia Voice Agent, a voice-powered assistant for Shopify stores. This policy explains what data the app processes, how, and your rights.

It applies to two groups: merchants who install the app on their Shopify store, and shoppers who use the voice widget on a merchant’s storefront. By installing or using Avondia Voice Agent, you agree to this policy.

On this page

Information we process

How we use data

Voice processing & AI subprocessors

Third parties we share with

Storage, retention & deletion

Data security

Your privacy rights

International data transfers

Children’s privacy

Changes to this policy

Information we process

a. Merchant & store account data

When a merchant installs the app, Shopify provides an OAuth access token and store identifier (e.g. store.myshopify.com). We store this token to authenticate requests to the store on the merchant’s behalf.

b. Store catalog data

To answer product and inventory questions quickly, we synchronize the store’s product and inventory data (product titles, variants, prices, stock levels, images) into our database, and generate search embeddings from it. This is merchant business data; it does not include customer personal information.

c. Order and customer data — accessed live, not stored

When a merchant or a logged-in shopper asks about orders, we query the Shopify Admin API in real time for only the data needed to answer, and we do not store it. This may include a customer’s name and an order’s shipping city/region/country, order numbers, status, totals, and tracking information. We do not access or process customer email addresses or phone numbers.

d. Voice and audio data

The app captures microphone audio while a session is active in order to understand spoken requests. Audio is streamed and processed in real time to generate a response and is not recorded or retained after the session. Live transcripts shown in the interface are transient and are not stored by us.

e. Automatically collected data

We use cookies and Google Analytics to understand usage of our marketing website. The voice widget itself does not require analytics cookies to function.

How we use data

To operate the voice assistant and answer questions about products, inventory, and orders.
To authenticate to the connected Shopify store on the merchant’s behalf.
To keep the product/inventory catalog current via Shopify webhooks.
To maintain security and diagnose technical issues.

We don’t sell your data. We do not sell personal data, and we do not use it for advertising or profiling.

Voice processing and AI subprocessors

To convert speech to a spoken answer, audio and the specific order/product data needed to respond are transmitted in real time to our AI voice provider, OpenAI, L.L.C. (OpenAI Realtime API) [and/or Google LLC (Gemini Live API), if enabled — confirm before publishing]. This provider processes the data solely to generate the response for that session, under its own terms and security controls. We do not use this data to train models.

Third parties we share data with (subprocessors)

Provider	Purpose	Data involved
OpenAI [and/or Google]	Real-time voice understanding & response; product-catalog embeddings	Audio, live order/product data, product text
Amazon Web Services (AWS)	Application hosting	All processed data (in transit / at rest on our servers)
Shopify	The commerce platform the app connects to	Source of all store, order, and customer data
Google Analytics	Marketing-website usage analytics	Website usage data

We share data only as needed to provide the service, or where required by law.

Data storage, retention, and deletion

We store: the merchant’s OAuth token and the synchronized product/inventory catalog, for as long as the app is installed.
We do not store: customer names, addresses, order details, voice audio, or transcripts — these are processed transiently and discarded after the session.
On uninstall: when a merchant uninstalls the app, we delete the store’s stored data (OAuth token and product catalog) in response to Shopify’s shop/redact request (sent ~48 hours after uninstall).

Data security

All connections to Avondia Voice Agent use TLS (SSL) encryption in transit. Access to stored data is restricted, and OAuth tokens are stored securely. [Retain your existing statement about encrypted offsite backups if accurate.]

Your privacy rights (GDPR / CCPA)

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing.

Shoppers: because we do not store your personal data, most requests are handled at the source by the merchant’s Shopify store. You may also contact us at the address below.
We support Shopify’s mandatory data-request and deletion webhooks: a customer data request (customers/data_request) and customer deletion (customers/redact) submitted through the merchant’s store are honored — and since we do not retain customer personal data, there is generally nothing for us to return or erase.

To exercise any right, email info@avondia.com. We respond within the timeframes required by applicable law.

International data transfers

Our services and subprocessors are located in the United States. If you access the app from outside the U.S., your data may be processed in the U.S. under appropriate safeguards.

Children’s privacy

The app is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the effective date above.

Contact us

If you have any questions about this policy, email info@avondia.ai or write to us at:

Avondia

is a property of Squarable LLC 245 8th Avenue, Suite 271
New York, New York 10011