Privacy Policy

Version 2026-11-06 · Digital Innovation Studio PLT

Digital Innovation Studio PLT, Malaysia ("PhoneSupport"), is the controller of the data of the stores that use PhoneSupport and of this website. For the calls made by store visitors, PhoneSupport is a processor acting on behalf of the store, under the Data Processing Agreement.

1. Store owners: what we collect. Account email, site URL and language, settings, the API key, verification and sign-in codes and dashboard sessions (stored only as hashes), the content you ask the assistant to learn, minutes used and call metadata, Stripe customer and subscription identifiers and invoices, and the emails you send us. Card details are entered on Stripe and never reach us.
2. Why and on what basis. To provide the service and manage billing (performance of the contract), to meet tax and accounting obligations (legal obligation), and to keep the service secure and prevent abuse such as repeated trials (legitimate interest). We send emails related to the service (codes, receipts, trial ended, help with the setup). Product news and offers are sent only if you opt in, which you can do and undo in the dashboard; in that case your email, site and language are added to our mailing list on Brevo (EU).
3. Store visitors who call the assistant. We process the voice, the transcript, a pseudonymised IP address and, if the store enables it, the signed-in customer's first name and recent orders, the single order that a visitor who is not signed in verifies with its number and email (only for the duration of the call), the name and quantity of the products the visitor asks to add to the cart and, if the visitor asks for a summary of the call by email, their email address (deleted once the email is sent), only on behalf of the store and according to its settings. The store is the controller: please refer to its privacy policy. If you contact us, we will forward your request to the store.
4. This website. The public pages of www.phonesupport.app use no cookies, no analytics and no third-party trackers; fonts are hosted on our own server. The dashboard (www.phonesupport.app/app) sets a single technical cookie after you sign in, to keep you signed in for up to 30 days; the widget installed on stores sets no cookies; only if a visitor changes page during a call, it keeps the last lines of the conversation in that browser tab's memory for 10 minutes, so the visitor can resume it (this is not a cookie and is not sent to us until the visitor resumes). The home page includes a live demo of the voice assistant, for which we are the controller: if you start a call, your voice is processed by Phonic only to answer you; we keep the transcript (not the audio) for 30 days to improve the demo, and technical call data (date, duration, country, pseudonymised IP address) for up to 12 months. To count visits we use Umami, cookieless statistics hosted on our own server: page views, country, referring site and device type, without cookies or personal profiles. The web server keeps technical logs, including IP addresses, for a short period for security.
5. Who receives the data. Stripe (payments), Amazon Web Services in Ireland (email delivery), Brevo in the EU (newsletter, only with consent), Contabo in Germany (hosting) and, for calls only, Phonic in the United States (voice processing). We do not sell personal data.
6. Transfers outside the EU. We operate from Malaysia and store data on servers in Germany. Transfers to Malaysia and to the United States are based on the Standard Contractual Clauses approved by the European Commission.
7. How long we keep it. Account data is kept while the account is active and deleted within 30 days of termination; invoices are kept as long as tax law requires. Call data and IP hashes are deleted after 12 months; recordings according to the store's settings; server logs are rotated.
8. Your rights. You can ask for access, rectification, erasure, restriction, portability and object to processing by writing to [email protected]. You also have the right to lodge a complaint with your data protection authority.
9. Changes. We may update this policy; the version date at the top shows the latest change, and material changes are announced to store owners by email.

Contact and privacy: [email protected]