Privacy Policy

Last updated: June 9, 2026

Dital AI ("we", "the app") is an AI customer-service assistant that merchants install on their Shopify store to answer their customers' questions over web chat, WhatsApp, and voice. This policy explains what data we process and how.

1. Information we process

• Store & account data — your store domain, OAuth access token, and the bot settings you configure (bot name, greeting, knowledge text).
• Store catalog data — products, prices, and availability, used so the assistant can answer product questions.
• Order & customer data — order status, items, and the customer name/contact on an order, used only to answer a customer's own "where is my order?" / delivery questions in real time.
• Conversations — messages exchanged between a store's customers and the assistant, retained to provide and improve the response and to show the merchant their conversation history.

2. How we use it

Data is used solely to operate the assistant on the merchant's behalf — answering customer questions, looking up orders/deliveries, and recommending products. We do not sell data, and we do not use it for advertising, marketing, or profiling.

3. Sub-processors

To provide the service we share the minimum necessary data with these providers, who process it on our behalf:

• OpenAI — chat responses, speech-to-text (Whisper), and text-to-speech.
• Google (Gemini) — real-time voice and chat responses.
• Microsoft Azure — Hebrew text-to-speech.
• Twilio & Meta (WhatsApp) — voice calls and WhatsApp messaging.
• Vercel, Railway, and our Redis provider — hosting and data storage.

4. Retention & deletion

We retain conversation context and settings only as long as needed to provide the service. When a merchant uninstalls the app, or upon a Shopify shop/redact or customers/redact request, we delete the associated stored data. Merchants and customers may request access to, or deletion of, their data by contacting us.

5. Security

Data is transmitted over HTTPS, access tokens are stored encrypted, and access is limited to what is required to run the service.

6. Your rights

Depending on your location (including GDPR/CCPA), you may have rights to access, correct, or delete your personal data. Contact us to exercise them.