Callor

Privacy Policy

Last updated: November 10, 2026

Callor is an AI assistant that builds and runs a Shopify dropshipping store for you. You talk to it on Telegram or WhatsApp; it creates products, collections, pages and ad creatives in the Shopify store you connect, and it shows its work in a panel inside Shopify Admin. This policy explains what we collect to do that, who processes it, and how to have it deleted.

Callor is operated by DIVINE APPS (Ontario business number 1001574454), which runs the Callor brand ("Callor", "we", "us"). We handle personal information under Canadian privacy law, including PIPEDA where it applies, and we honour the equivalent rights of merchants and reviewers in other jurisdictions.

1. Information we collect

From Shopify

  • Your shop domain and an Admin API access token, stored server-side so Callor can act in your store. Tokens are encrypted at rest and never written to logs.
  • The store data Callor works with: products and variants it creates or reads, the collection, pages, policies and navigation it builds, theme names and whether the Callor homepage block is installed, and the state of an in-progress or finished build.
  • Your Shopify subscription status and plan, and the Shopify charge identifier. Card details never reach us: Shopify Billing collects payment inside Shopify.

Callor requests only the scopes its features use (products, publications, online store pages, navigation, legal policies, and themes). It does not request access to your orders or your customers, so it does not receive shopper names, addresses, emails or order history.

From Telegram and WhatsApp

  • The identifiers needed to reply to you: your Telegram user and chat id, or your WhatsApp phone number and the WhatsApp business account that messaged us.
  • The messages you send to the Callor bot - including typos, voice notes (transcribed so the assistant can read them), approvals, skips and file or image attachments - and the assistant's replies.
  • Business details you give in conversation: store name, niche, budget, timezone and preferences.

Products, creatives and generated content

  • Product and supplier data for the items Callor sources, including titles, images, prices and supplier identifiers.
  • Ad creatives Callor generates: images, captions, and (when enabled) a short video with a synthesized voice. These are stored in a private bucket and served through short-lived signed links.
  • Build notes and errors, so the assistant can tell you what it could not finish.

Technical data

  • Server logs and error reports (for example the request path, status, timing and an error stack) used to keep the service running and secure.

2. How we use it

  • To connect to your Shopify store and build, publish and update what you ask for.
  • To understand your instructions and reply to you in chat, including free-text replies.
  • To source products, write copy and generate ad creatives with AI models.
  • To manage your trial, plan and allowances, and to reconcile them with Shopify Billing.
  • To diagnose failures observed in a shop, and to keep the service secure and abuse-free.
  • To meet legal, tax and accounting obligations.

We do not sell personal information, and we do not use your Shopify data to advertise to your shoppers.

3. Who processes it

We use a small set of processors, each for one job:

  • Shopify - the store, the embedded app and Shopify Billing.
  • Telegram and Meta (WhatsApp Cloud API) - message delivery.
  • Twilio - delivery of phone sign-in codes and WhatsApp message handling.
  • OpenAI - language and image generation, voice-note transcription and spoken previews.
  • Google Gemini - model fallback for the assistant when the primary model is unavailable.
  • ElevenLabs - the voice track for video ads, only when the video step is enabled.
  • CJdropshipping - supplier catalogue, stock and fulfilment data.
  • Supabase - database, private file storage and secrets; Fly.io and Vercel - application hosting.
  • Sentry - error monitoring.
  • Stripe - card billing for merchants who are not billed through Shopify.

These providers process data on our instructions. Some process it outside Canada, mainly in the United States, under their standard contractual safeguards.

4. Billing

Shopify-installed merchants pay through Shopify Billing, after approving a charge in Shopify. Callor receives the subscription status, plan and charge identifier, never your card number. Merchants billed outside Shopify are handled by Stripe, which collects and stores the payment details; we receive a customer and subscription reference and the invoice status.

5. How long we keep it

There is no automatic purge. We keep your store connection, build state and chat history while your account exists, so the assistant can continue where you left off, and we delete them when you ask us to.

  • Uninstalling the app runs our app/uninstalled handler, which removes the Shopify access token and the shop domain. It does not delete your chat history, the generated creatives, the build records or the tenant record.
  • After Shopify's grace period, shop/redact runs and additionally clears the stored build identifiers for that shop. It still does not delete chat history or creatives.
  • When Shopify sends customers/data_request or customers/redact for a shopper, we answer from what we hold. Callor does not request customer or order scopes, so in practice there is no shopper record to return or delete; the handler still runs and records the request.
  • Creative files are served through signed links that expire after 7 days.
  • Billing records and invoices are kept as long as tax and accounting law requires, even after the store is disconnected.

6. Deleting your data

To delete everything we hold - chat history, build records, creatives and the tenant record - email support@trycallor.com from the address you use with Callor, or tell us your shop domain. We may ask you to confirm you control the shop before acting. Uninstalling alone is not a full deletion, as explained above.

Deleting data does not remove records we must keep for tax, fraud prevention or legal claims, and it does not delete content already published to your storefront - that stays in your Shopify store, which you control.

7. Security

  • Shopify tokens are stored server-side, encrypted, and excluded from logs.
  • Admin pages authenticate with Shopify session tokens, not cookies or shared links.
  • Creative files sit in a private bucket; links are signed and expire.
  • Access to production systems is limited to the people who operate Callor.

8. Your rights

Subject to applicable law, you can ask what personal information we hold about you, ask for a correction, withdraw consent to optional processing, or ask for deletion. Write to support@trycallor.com. If you are a shopper of a store built with Callor, the merchant is the controller of that store's data; we can still help route a request to them.

9. Changes

If this policy changes in a way that matters, we will update the date above and, where the change is significant, tell you in chat or by email before it takes effect. Questions go to support@trycallor.com or our support page.