Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Lisra.Ai (“Lisra”, “we”) collects, uses and protects information when you use our AI customer-operations platform at app.lisra.ai (the “Service”). Lisra.Ai is a product and brand, not itself a registered company. The Service is operated from 8177 Glades Road, Suite 16, Boca Raton, Florida 33434, USA.

1. Information we collect

• Account data, your name, email, password (stored hashed) and workspace/business details you provide.
• Workspace content, the knowledge, rules, products, contacts and messages you add so the Service can work for your business.
• Visitor / customer data (as a processor), when your customers chat with your Lisra agent, we process the messages and any details they share on your behalf, as your service provider.
• Usage data, logs, device/browser info and feature usage needed to run and secure the Service.

1a. Stores you connect (Shopify, WooCommerce and others)

When you connect a store, Lisra reads it only to show you and your assistant what you already sell. Nothing in your store is ever created, changed or deleted.

• What we read, products, prices, images, stock levels, and orders (order number, totals, currency, date).
• Customer details on orders, a buyer’s name and email address only, and only so an order attaches to the right contact in your own workspace. We do not request phone numbers or postal addresses.
• What we never read, payment details, card data and bank information never reach Lisra.
• Why, so your assistant answers from real products and prices instead of guessing, and so your revenue reports, profit view and invoices describe real orders.
• Stopping it, disconnect from inside Lisra, or remove the app in your store, and we stop reading it immediately. Data already synced is your workspace’s own and can be exported or erased from Data & privacy.
• Deletion requests from the platform, where a store platform sends us a data-deletion request on a shopper’s or a shop’s behalf, we act on it. For Shopify this arrives on the mandatory compliance webhooks and is verified by signature before we act. On an erasure request we remove that shopper’s name and email address from the synced order records and unlink them from your contact, keeping the order’s amount so your own accounts do not change; on a request for a copy we tell you what we hold, because you are the one who answers your customer; and when a shop is removed we disconnect it. What each request asked for, and what we did, appears on your store’s page in Lisra.

2. How we use information

• To provide, operate, secure and improve the Service.
• To generate AI responses grounded only in your own configured knowledge and data.
• To communicate with you about your account and important service notices.
• We do not sell your data, and we do not use your customers’ data to train third-party models.

3. Service providers (sub-processors)

We share data only with vendors that help us run the Service, under contract and only as needed:

• Supabase, database, authentication and file storage.
• Vercel, application hosting.
• Anthropic, OpenAI, Google, Groq, AI model processing of prompts you send.
• ElevenLabs, voice generation (when voice features are used).
• Resend, transactional email delivery.
• Stripe, payment processing (only if/when you enable billing).

4. Security

Data is encrypted in transit (HTTPS) and secrets are encrypted at rest. Each workspace’s data is isolated by row-level security so one customer can never read another’s. Access to production data is limited and audited.

5. Data retention

We keep your data while your account is active and as needed to provide the Service or meet legal obligations. You can request export or deletion at any time (see below); on account closure we delete or de-identify workspace data within a reasonable period unless the law requires longer retention.

6. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. You can exercise these from Data & privacy in your workspace, or by contacting us. We respond within the time required by applicable law.

7. International transfers

We are based in the United States and process data there and with the providers above. Where required, we rely on appropriate safeguards for cross-border transfers.

8. Cookies

We use only the cookies needed to sign you in and keep the Service secure. We do not use advertising cookies.

9. Children

The Service is for businesses and is not directed to children under 13; we do not knowingly collect their data.

10. Changes & contact

We may update this policy and will change the date above. Questions or requests: info@lisraai.com, or +1 (561) 210-3577.

This is an informational baseline reflecting how the Service works today. It is not legal advice, please review it with your attorney and adapt it to your obligations before relying on it.