Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Lisra.Ai (“Lisra”, “we”) collects, uses and protects information when you use our AI customer-operations platform at app.lisra.ai (the “Service”). The Service is operated by FiKHSONS LLC, a Florida limited liability company doing business as Lisra.Ai, from 8177 Glades Road, Suite 16, Boca Raton, Florida 33434, USA.

1. Information we collect

• Account data, your name, email, password (stored hashed) and workspace/business details you provide.
• Workspace content, the knowledge, rules, products, contacts and messages you add so the Service can work for your business.
• Visitor / customer data (as a processor), when your customers chat with your Lisra agent, we process the messages and any details they share on your behalf, as your service provider.
• Usage data, logs, device/browser info and feature usage needed to run and secure the Service.

1a. Stores you connect (Shopify, WooCommerce and others)

When you connect a store, Lisra reads it only to show you and your assistant what you already sell. Nothing in your store is ever created, changed or deleted.

• What we read, products, prices, images, stock levels, and orders (order number, totals, currency, date).
• Customer details on orders, a buyer’s name and email address only, and only so an order attaches to the right contact in your own workspace. We do not request phone numbers or postal addresses.
• What we never read, payment details, card data and bank information never reach Lisra.
• Why, so your assistant answers from real products and prices instead of guessing, and so your revenue reports, profit view and invoices describe real orders.
• Stopping it, disconnect from inside Lisra, or remove the app in your store, and we stop reading it immediately. Data already synced is your workspace’s own and can be exported or erased from Data & privacy.
• Deletion requests from the platform, where a store platform sends us a data-deletion request on a shopper’s or a shop’s behalf, we act on it. For Shopify this arrives on the mandatory compliance webhooks and is verified by signature before we act. On an erasure request we remove that shopper’s name and email address from the synced order records and unlink them from your contact, keeping the order’s amount so your own accounts do not change; on a request for a copy we tell you what we hold, because you are the one who answers your customer; and when a shop is removed we disconnect it. What each request asked for, and what we did, appears on your store’s page in Lisra.

2. How we use information

• To provide, operate, secure and improve the Service.
• To generate AI responses grounded only in your own configured knowledge and data.
• To communicate with you about your account and important service notices.
• We do not sell your data, and we do not use your customers’ data to train third-party models.

3. Service providers (sub-processors)

We share data only with providers that help us run the Service, under contract and only as needed:

• Our database provider, the database, sign-in and file storage.
• Our cloud hosting provider, application hosting.
• Our AI model providers, AI processing of the prompts you send.
• Our voice providers, voice generation and speech, when voice features are used.
• Our telephony providers, text messages, phone numbers and the carrier leg of phone calls.
• Our email delivery provider, transactional email.
• Our payment processor, payments, only if and when billing is on.
• Our image and security provider, image generation and the bot check on our sign-in page.
• Our backup storage providers, where our nightly database backup is stored, encrypted.
• Stores and messaging networks you connect (Shopify, WooCommerce, Telegram, Meta’s WhatsApp, Messenger and Instagram, and others), for workspaces that connect them: store data and the messages your customers send reach us through the store or the network they came from.

These are all of them. A provider appears here because data actually reaches it, and several are reached only when you switch that feature on.

4. Security

Data is encrypted in transit (HTTPS) and secrets are encrypted at rest. Each workspace’s data is isolated by row-level security so one customer can never read another’s. Access to production data is limited and audited.

5. Data retention

We keep your data while your account is active and as needed to provide the Service or meet legal obligations. You can export it at any time (see below). A workspace owner can close the workspace, which makes it view only, and ask for it to be erased: the erase runs seven days after it is asked for and can be canceled until then by reopening the workspace. A closed workspace nobody asked to erase is erased 90 days after it closed, and its owner is emailed a week before. Billing and tax records are kept for as long as tax and accounting law requires. Copies of deleted information remain in our encrypted backups until those age out, normally 30 days and never more than five weeks, and are not used for anything else.

6. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. You can exercise these from Data & privacy in your workspace, or by contacting us. We respond within the time required by applicable law. A person who wrote to a business that uses Lisra.Ai, on its website chat, Messenger, Instagram, WhatsApp, Telegram, by phone or by email, can ask that business to erase them: the business erases them from that customer’s record in Lisra, everywhere Lisra keeps them, and an order keeps only its amounts for the business’s accounts. They can also ask us, as described on our data deletion page.

7. Where information is stored

Our main database and application servers are located in Singapore. We are a United States company, and we and our service providers also process information in the United States and in other countries. Wherever it is processed, your information is protected as this policy describes, and where the law requires it we use appropriate safeguards for transfers between countries.

8. Cookies

We use only the cookies needed to sign you in and keep the Service secure. We do not use advertising cookies.

9. Children

The Service is for businesses and is not directed to children under 13; we do not knowingly collect their data.

10. Changes & contact

We may update this policy and will change the date above. Questions or requests: support@lisraai.com, or +1 (728) 777-1113.

This is an informational baseline reflecting how the Service works today. It is not legal advice, please review it with your attorney and adapt it to your obligations before relying on it.