Privacy Policy

Effective September 30, 2026

Laleo AI Inc. ("we", "us") makes laleo, a service that helps Shopify merchants recover abandoned checkouts. When a shopper leaves checkout, laleo can call them on the merchant's behalf, answer the question that stopped them, and report to the merchant why people didn't buy.

This policy explains what personal information we collect, how we use and share it, and the choices you have. It covers this website (laleo.ai), the laleo app (app.laleo.ai), the laleo Shopify app, and the calls and text messages laleo sends for merchants (together, the "Service").

1. Who this policy covers

• Merchants: people who sign in to laleo to run a store's account, and the businesses they represent.
• Shoppers: customers of a merchant's Shopify store whom laleo contacts, or whose checkout laleo processes, on the merchant's behalf.
• Visitors: anyone who visits laleo.ai.

We decide how merchant account information is used. Shopper information belongs to the merchant: we process it on the merchant's instructions to provide the Service to that merchant, and the merchant's own privacy policy also applies to it.

2. Information we collect

a. From merchants

• Sign-in: laleo has no passwords. You sign in with Google or Microsoft, and we receive your account identifier, name, email address and whether that email address is verified. See section 4 for how we handle information from Google.
• Profile: your name, email address, and a phone number and extension if you add them.
• Store connection: when you connect a Shopify store, Shopify gives us the store's name and domain and an access token that lets laleo read the store's orders, customers, products, discounts and store policies. We store the token encrypted.
• Business verification: phone carriers require businesses that call or text customers to register. To register your store's phone numbers we collect your business's legal name, business type, tax registration number (such as an EIN), website and address, and the name, title, email address and phone number of an authorized representative.
• Workspace activity: the settings, campaigns, offers and team members you configure, and actions you take in the app, such as stopping calls to a contact.

b. About shoppers, on a merchant's behalf

• Checkout information from Shopify: when a shopper starts checkout on a store that uses laleo, Shopify sends us the checkout: the shopper's name, email address and phone number, the items in the cart, the cart's value and currency, and when the checkout was last active. We use this to work out the shopper's local time zone.
• Orders and refunds from Shopify: whether the checkout became an order, and that order's paid and refunded amounts. We use orders to stop outreach once a shopper buys and to report recovered revenue to the merchant.
• Calls: laleo's calls are placed by an automated AI voice agent. Calls are recorded and transcribed. We keep the recording, the transcript, a summary, the call's outcome and duration, and the phone numbers involved.
• Call analysis: we analyze transcripts to identify why the shopper didn't complete their purchase. Each finding is linked to the exact words the shopper said, so the merchant can check it.
• Text messages: if a shopper opts in to text messages from a store, their mobile number, their consent and the messages sent to them. See section 6.
• Contact preferences: numbers that a merchant or shopper has asked us to stop calling.

c. From visitors

laleo.ai sets no cookies and runs no analytics or advertising scripts. It loads fonts from Google Fonts, so your browser sends your IP address and browser details to Google when you visit. Like any website, our hosting provider records basic request logs (IP address, browser, page requested and time) that we use to keep the Service secure and working.

The laleo app uses only strictly necessary cookies: a session cookie that keeps you signed in for up to seven days, and a short-lived cookie that protects the sign-in process. It uses no analytics, advertising or tracking cookies.

3. How we use information

• To provide the Service: signing you in, running your workspace, and reading your store's checkouts and orders.
• To contact shoppers on a merchant's behalf: checking that a checkout is still abandoned, that the shopper hasn't bought and that their number may still be called, then placing the call, answering their questions, offering any incentive the merchant has chosen, and retrying unanswered calls.
• To report results to the merchant: call recordings, transcripts, summaries, reasons shoppers didn't buy, and revenue recovered according to the store's Shopify orders.
• To register the merchant's phone numbers and business with carriers so calls and texts are delivered and identified correctly.
• To keep the Service secure, prevent abuse, fix problems and comply with the law.
• To contact merchants about their account, the Service and changes to it.

We do not sell personal information and do not use it for advertising. We use a shopper's information only to provide the Service to the merchant it came from. It is never used for another merchant. We do not use personal information to train AI models.

4. Information from Google

If you sign in with Google, laleo requests only the openid, email and profile permissions. We receive your Google account identifier, name and email address and whether the email address is verified. We do not request or receive access to Gmail, Google Drive, contacts, calendars or any other Google data.

We use this information only to sign you in, to identify you to the other members of your workspace, and to contact you about your account. We share it only as described in section 5, never sell it, and never use it for advertising. You can remove laleo's access at any time from your Google Account settings.

laleo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

• With the merchant: shopper information collected for a store is visible to the members of that store's laleo workspace.
• With service providers that run parts of the Service for us. They may use the information only to provide their service to us:
  • Google Cloud, which hosts the Service and stores its data.
  • Google and Microsoft, for sign-in.
  • Shopify, from which we receive store, checkout and order information.
  • Twilio, which provides phone numbers, connects calls and texts, and submits carrier registrations.
  • Vapi, which runs the voice agent and records and transcribes calls, and the speech and language model providers it uses to do so.
  • OpenAI, which provides the language models that power the voice agent and analyze transcripts.
• With carriers and registries: business verification information is submitted through Twilio to phone carriers and The Campaign Registry, as carriers require.
• For legal reasons: when we believe in good faith it is necessary to comply with a law, court order or subpoena; to protect the rights, property or safety of Laleo AI Inc., our users or the public; or to investigate possible wrongdoing in connection with the Service.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, information may be transferred. We will give notice before it becomes subject to a different privacy policy.

6. Text messages

Merchants can use laleo to send order and cart notifications by text message to shoppers who opt in at checkout, and laleo may send account notifications to merchants who opt in. The following applies to all of these messages:

• Information collected: your mobile number, your consent and the messages sent to you.
• Use: your mobile number is used only to send the messages you agreed to receive.
• No sharing: no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
• Message frequency varies with your orders and account activity.
• Rates: message and data rates may apply, depending on your carrier and plan.
• Opt out at any time by replying STOP. You will receive one confirmation message and no further messages.
• Help: reply HELP or email admin@laleo.ai.

Our Terms of Service describe the messaging program in full.

7. Calls

laleo calls come from the merchant's store, using a phone number registered to that store's business, and the agent introduces itself as calling from the store. Calls are made by an automated AI voice agent, and they are recorded and transcribed.

If you no longer want to receive these calls, tell the store, or email admin@laleo.ai with your phone number and the store's name. We will make sure that store stops calling your number through laleo. A number that has been stopped is not called again, even if it appears on a later checkout.

8. How long we keep information

• Merchant accounts: for as long as the account is active. After an account is closed we delete its information, except what we must keep to comply with the law, resolve disputes or enforce our agreements.
• Shopper information: for as long as the merchant uses laleo. Call recordings and transcripts are kept for TODO: retention period. When a merchant stops using laleo, we delete that store's shopper information within TODO: deletion window, unless the law requires us to keep it.
• Opt-outs: numbers that asked not to be contacted are kept so we can keep honoring the request.
• Sessions: sign-in sessions expire after seven days.

9. Security

Information is encrypted in transit. Store access tokens are encrypted at rest. Each workspace's information is available only to that workspace's members and to Laleo AI Inc. staff who need it to operate and support the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you, and receive a copy of it;
• correct inaccurate information;
• delete your information;
• object to or restrict how we process it;
• withdraw consent where we rely on it;
• opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising.

We will not treat you differently for exercising these rights. Merchants can make a request by emailing admin@laleo.ai. Shoppers should contact the store they bought from, since the store decides how its customers' information is used; you can also email us, and we will pass your request to the store or act on it ourselves where the law allows. We may need to verify your identity before acting on a request. An authorized agent may make a request on your behalf.

Deleting your laleo account does not delete your Google or Microsoft account or the information those services hold.

11. Children

The Service is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version on this page and update the effective date at the top. If we make a material change, we will also notify merchants by email or in the app before it takes effect.

13. Contact us

Laleo AI Inc.
TODO: mailing address
admin@laleo.ai