Privacy Policy
Privacy Policy
Privacy Policy for Ovlo
Ovlo Privacy Policy
Last Updated: January 31, 2025
1. Introduction
2. Information We Collect
2.1 Categories of Personal Information
• Identity Information:
• Name
• Email address
• Phone number
• Store information
• Voice and Communication Data:
• Voice inputs (processed in real‑time, not stored)
• Text transcripts (anonymized)
• Chat history
• Search queries
• Technical Information:
• IP address
• Device information
• Browser type
• Cookie data
• Usage statistics
• Commercial Information:
• Shopping preferences
• Product interactions
• Purchase history
• Store analytics
2.2 Sources of Personal Information
• Directly from you
• Your use of our Service
• E-commerce platforms
• Third‑party service providers
• Cookies and tracking technologies
3. How We Use Your Information
We use your information for:
• Providing and improving the Service
• Processing voice commands
• Generating product recommendations
• Analytics and performance monitoring
• Security and fraud prevention
• Legal compliance
• Communication with you
4. Information Sharing and Disclosure
4.1 Categories of Recipients
• E-commerce platform providers (e.g., Shopify)
• Service providers and processors
• Analytics providers
• Security vendors
• Legal authorities (when required)
4.2 Business Transfers
We may transfer your information in the case of a merger, acquisition, or sale of assets.
5. Your Privacy Rights
5.1 GDPR Rights (EU/UK Users)
• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision making
5.2 CCPA Rights (California Residents)
• Right to know
• Right to delete
• Right to opt‑out of sale
• Right to non‑discrimination
• Right to correct
• Right to limit use of sensitive personal information
5.3 Other State Privacy Rights
We honor similar rights for residents of Virginia, Colorado, Connecticut, Utah, and other states with applicable privacy laws.
6. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
• Encryption in transit and at rest
• Access controls
• Security monitoring
• Regular security assessments
• Employee training
7. International Data Transfers
We may transfer your information to countries outside your residence. We ensure appropriate safeguards through:
• Standard contractual clauses
• Adequacy decisions
• Other legal mechanisms
8. Children’s Privacy
Our Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it.
9. Cookies and Tracking Technologies
9.1 Types of Cookies We Use
• Essential cookies
• Functional cookies
• Analytics cookies
• Performance cookies
9.2 Your Cookie Choices
• Browser settings
• Opt‑out mechanisms
• Platform‑specific controls
10. Platform‑Specific Disclosures
10.1 Shopify App Store
• App functionality requirements
• Data access and usage
• Platform‑specific privacy controls
10.2 Mobile App Stores
• Privacy nutrition labels
• Data safety information
• Platform‑specific requirements
11. Data Retention
We retain your information for as long as necessary to:
• Provide our Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes through:
• Email notification
• Service announcement
• Website notice
13. Contact Us
For privacy‑related questions, please contact:
Email: privacy@ovlo.ai
14. Additional Disclosures
14.1 California Shine the Light Law
California residents may request certain information about our disclosure of personal information to third parties for their direct marketing purposes.
14.2 Nevada Privacy Rights
Nevada residents may opt‑out of the sale of their covered information.
14.3 Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
• Consent
• Contract performance
• Legal obligations
• Legitimate interests
15. Specific Processing Activities
15.1 Voice Processing
• Real‑time processing only
• No storage of raw voice data
• Anonymization procedures
• Training data usage
15.2 AI and Automated Decision‑Making
• Types of decisions made
• Logic involved
• Significance and consequences
• Opt‑out options
16. Business Customer Data
For business customers, we act as a data processor and handle data according to:
• Data processing agreements
• Platform terms of service
• Applicable privacy laws
17. Compliance Contacts
• Privacy Team: privacy@ovlo.ai
• Security Team: security@ovlo.ai
Last Updated: January 31, 2025