VoiceCart privacy policy

Last updated: 30 July 2026

VoiceCart adds voice shopping to a Shopify storefront. This page explains exactly what the app does and does not record.

Raw audio is never stored.

In most browsers, speech recognition runs entirely on the shopper's own device and the audio never reaches our servers at all — only the resulting text does. Where a browser has no built-in recognition (for example iOS Chrome, or in-app browsers), a short clip may be sent to the merchant's own server for transcription and is deleted in the same request that transcribes it. Audio is never written to permanent storage, never backed up and never sent to a third party.

What we store

Transcripts — the text of what was said, the product matched, and the outcome. Kept for the merchant's configured retention window (30 days by default) and then deleted automatically. Merchants can switch transcript storage off entirely, or delete all transcripts at any time from the app.
Daily counters — aggregate numbers only (commands, matches, additions to cart). These contain no personal data and are what powers the merchant's dashboard and usage limits.
Unmatched phrases — normalised text of requests that matched no product, with a count, so merchants can see what shoppers are asking for.
Shop settings — the merchant's own configuration, and the Shopify access token needed to operate the app.

What we do not store

Audio recordings.
Customer identifiers — no customer ID, no name, no email address, no phone number.
IP addresses.
Payment or card information. The app refuses to process any phrase that looks like payment credentials.
Cookies or cross-site tracking identifiers. The widget sets no cookies.

A random identifier is generated per browser tab so that several commands in one visit can be counted together. It is stored in sessionStorage, so it is discarded when the tab closes, and it is one-way hashed with the shop's identifier before being saved. It cannot be used to identify or track a person.

Shopify data we access

The app requests a single permission, read_products, used for catalog statistics in the merchant admin. Product search, variant lookup and adding to the cart all happen in the shopper's browser through Shopify's public storefront endpoints, so no additional access is needed.

Data deletion

When a merchant uninstalls VoiceCart, all of that shop's data — settings, counters, unmatched phrases and transcripts — is deleted. We also honour Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Because we hold no data linked to any identifiable customer, per-customer requests have nothing to return or erase.

Contact

For any privacy question or data request, contact privacy@voicecart.app.