01Overview
LiveCart is a product offered by OpenAmbit Technologies Private Limited, an India-based private limited company. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit this website, contact us, book a walkthrough, interact with marketing pages, or use LiveCart services under an applicable agreement. It is a public notice and does not replace any signed customer agreement, data processing addendum, order form, or product-specific notice.
02Our role
Depending on the context, we may act as an independent controller or data fiduciary for our website, marketing, sales, security, and account-administration activities. For content that businesses and their customers put into the LiveCart service (conversations, contact details, call media, transcripts, AI summaries, knowledge sources, and catalog and order data), we generally act as a processor or service provider on behalf of the business that uses LiveCart (the “Organization”), following its instructions and configuration; the applicable customer agreement or data processing addendum controls. Customers are responsible for their own storefront notices, consent flows, lawful basis decisions, user communications, and compliance determinations.
03Information we collect
We may collect business contact details submitted by you, account and workspace details, communications with our team, scheduling information, product usage data, security logs, device and browser information, approximate location derived from technical signals, cookie and consent preferences, route and campaign context, and service-operation records. Please do not submit payment card numbers, government identifiers, health information, passwords, children's data, or other sensitive personal data through demo, contact, or general support forms unless we have expressly requested it through an approved secure channel.
04Information processed in the LiveCart service
When a shopper chats with an Organization's LiveCart agent or team, we process the messages they send, the replies, and conversation metadata such as time, page, and channel. If an Organization asks for it, we also process contact details the shopper provides, such as an email address or phone number verified with a one-time code. We process order, product, and stock information from stores the Organization connects, and documents, web pages, and notes the Organization adds to its knowledge base. When a call takes place, we process the audio and video needed to connect it. Recordings, transcripts, and summaries are created only as described under Call recording and transcription.
05AI processing
LiveCart uses AI models to understand messages, find relevant knowledge and products, draft and send replies, extract details the Organization asks for, and summarize conversations. To do this we send the minimum relevant content to AI model providers through our model gateway: the current message and conversation context, plus a limited number of retrieved knowledge excerpts and product records. We never send a whole catalog or knowledge base in one request. The Organization's published workflows and permissions decide what actions the agent may take; an AI model cannot widen them. AI-generated replies can be wrong, so the agent shows the source it used where available and hands the conversation to a person under the Organization's rules. We do not use Organization or shopper content to train our own or third-party AI models. AI providers process this content only to return a result to us, under terms we have with them. Our default model provider is Alibaba Cloud Model Studio, served through its Frankfurt-hosted Global deployment, which is not an EU data-residency commitment; other providers, such as OpenAI or DeepSeek, are used only where we have explicitly configured them for a feature or deployment. We record AI usage (such as tokens and credits) for billing and abuse prevention.
06Call recording and transcription
Calls are not recorded unless the Organization has turned recording on and the shopper gives explicit consent for that specific call after seeing the Organization's recording notice. Joining a call, or allowing camera or microphone access, is not consent to record. A shopper can refuse, or withdraw consent during the call, and recording then stops. We keep a record of each consent decision, including the notice version shown and the time, as evidence. Transcripts and AI summaries of a call are created only from a recording that exists with current consent; once a recording is withdrawn, deleted, or expired, it is no longer used for transcripts or summaries. Recordings, transcripts, and summaries are visible only to authorized members of the Organization, and are kept according to the Organization's retention settings and our agreement with it. Shoppers who want a recording or transcript accessed or deleted should contact the business they spoke with; we will help that business respond.
07Sign in with Google
If you choose Google to request beta access or sign in, Google provides LiveCart with your Google account identifier, email address, email-verification status, and profile name. We use this information to authenticate you, link and secure your LiveCart identity, prefill your beta access request, prevent duplicate or abusive requests, and operate your account. We do not request or access your Gmail, Google Drive, Google Calendar, contacts, or other Google content. We retain the resulting identity, access-request, consent, and security records as described under Retention, and disclose them only to service providers needed to operate authentication, hosting, communications, security, and the LiveCart service. We do not sell Google user data.
08Website analytics and attribution
We use Google Tag Manager, Google Analytics, Google Ads measurement, and PostHog product analytics only where permitted by your consent state and applicable law. PostHog session replay starts only after analytics consent and stops if that consent is withdrawn. We configure replay to keep ordinary public page content visible while masking form input values, blocking form elements and explicitly private regions, omitting console, canvas, request-body, response-body, and request-header capture, and removing URL query strings and fragments from recorded network requests. When advertising and user-data consent are granted and a new beta access request is confirmed, we may send Google Ads a normalized SHA-256 hash of the submitted email address for enhanced conversion measurement. The raw email address is not placed in Google Tag Manager data-layer events, Google Analytics events, or PostHog analytics events. Our analytics event design also excludes raw names, phone numbers, company names, website URLs, free-form message text, provider tokens, verification codes, and raw click identifiers.
09Consent and cookies
Analytics and advertising storage are denied by default unless a visitor makes an affirmative choice. You can accept, reject, or change choices from the Cookie preferences control in the footer. We use cookies, local storage, and similar technologies to remember consent choices, maintain route and attribution context, support security and performance, and operate the website. Some service providers may process technical information necessary to deliver the website even when optional analytics or advertising storage is denied.
10How we use information
We use information to respond to enquiries, schedule walkthroughs, evaluate fit, provide and improve the service, administer accounts, maintain security, prevent abuse, troubleshoot product issues, conduct consent-aware measurement, manage procurement and contracting, keep business records, comply with legal obligations, and exercise or defend legal claims. We do not use public demo or contact forms to request highly sensitive personal data.
11Disclosure and service providers
We may disclose limited information to service providers that support hosting, AI model processing, real-time audio and video calls, recording storage, one-time-code and email delivery, analytics, scheduling, communications, support, CRM, security, infrastructure, billing, legal, accounting, and business operations. These providers are expected to process information for the purposes we authorize and subject to appropriate contractual and operational safeguards. We do not intend to sell personal information in the ordinary sense of exchanging it for money. Some analytics or advertising activities may be treated as a sale or sharing under certain privacy laws; where applicable, we rely on consent, opt-out, or preference mechanisms.
12International processing
We are based in India and may use service providers or infrastructure in other jurisdictions. For example, AI model requests may be processed in Germany or other regions where our configured providers operate. Information may therefore be processed in countries whose privacy laws differ from those where a visitor, customer, shopper, or advisor is located. Where required, transfer mechanisms and contractual terms should be addressed in the applicable customer agreement, data processing addendum, or procurement documentation.
13Retention
We retain information for as long as reasonably necessary for the purpose collected, including service delivery, account administration, security, fraud prevention, analytics configuration, business records, tax/accounting obligations, legal compliance, dispute resolution, and enforcement of agreements. Retention periods may vary by data category, customer contract, consent state, and legal requirement. Conversation transcripts, call recordings, and AI summaries follow the retention settings of the Organization that owns them, within the limits of its plan and our agreement, and can be deleted at its request. Consent evidence and security, billing, and audit records may be kept longer where needed to show what was agreed or to meet legal obligations. We may retain de-identified, aggregated, or non-personal information where lawful and appropriate.
14Security
We use reasonable technical and organizational measures intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, operational review, provider review, secure configuration practices, and monitoring appropriate to the nature of the data and service. No website, network, or service can be guaranteed to be completely secure, and this policy is not a security warranty or certification statement.
15Your privacy rights
Depending on where you are located and which law applies, you may have rights to access, correct, delete, export, object to, restrict, or withdraw consent for certain processing of personal information. California residents may also have rights under the CCPA as amended, including rights to know, delete, correct, opt out of certain sale or sharing, limit certain uses of sensitive personal information, and be free from discrimination for exercising applicable rights. We may need to verify your identity and may decline or limit a request where an exception applies.
16Children
LiveCart is intended for business and commerce use and is not directed to children. Do not knowingly submit children's personal data through this website or demo-booking flow. Customers using LiveCart in environments that could involve children or minors must make their own legal assessment and implement appropriate notices, consent, age-gating, and usage controls.
17Changes to this policy
We may update this Privacy Policy as the product, legal entity details, service providers, laws, or business operations change. Material updates should be reflected by changing the last-updated date on this page. Continued use of the website or services after an update may be subject to the updated policy, unless a signed agreement provides otherwise.
18Contact
Privacy requests and questions about LiveCart can be sent to support@livecart.ai. The LiveCart product is offered by OpenAmbit Technologies Private Limited, Urbtech Trade Centre, A-116, Sector 132, Noida 201304, India.