Terms of Service & Data Processing

These terms govern use of Invox, a customer-support tool for Shopify merchants available at invoxreply.com. By connecting a store or using the service, the merchant ("you") agrees to these terms. Questions: support@invoxreply.com.

1. The service

Invox connects to your Shopify store and support inbox to help you read and respond to customer inquiries, including AI-generated draft replies that you review before sending. You are responsible for the content of the messages you send and for using the service in compliance with applicable law.

2. Data processing terms

When you connect Shopify, Invox processes order and customer data on your behalf, solely to provide the customer-support functionality described above. We act as a data processor for that data; you remain the controller. Specifically, we agree to:

• Process personal data only to provide the service, and not for any other purpose.
• Request only the minimum Shopify permissions required (read access to orders).
• Not sell personal data and not use it for advertising or model training.
• Keep data only while your account is active, and delete it on request or on disconnect.
• Use vetted subprocessors only — Shopify (data source), Meta (read-only ad insights, when connected), Anthropic (Claude AI, to generate/translate replies; it does not train on your data) and Stripe (payment processing) — as described in our Privacy Policy.
• Honor data-subject requests (access, correction, deletion) forwarded by you.

3. Security

• Stored credentials and access tokens are encrypted at rest (AES-256-GCM).
• Database backups are encrypted.
• All traffic is served over HTTPS.
• Access to the application requires authentication and is isolated per workspace.
• Access to customer personal data is logged.

4. Security incident response

If we become aware of a security incident affecting personal data, we will:

• Investigate and contain the incident as quickly as reasonably possible.
• Notify affected merchants without undue delay (and, where a confirmed breach of personal data has occurred, within 72 hours of becoming aware), at the email on file.
• Where required, notify Shopify and take steps consistent with Shopify's API terms and applicable data-protection law.
• Document the incident and the remediation taken, and revoke or rotate any compromised credentials.

To report a suspected vulnerability or incident, contact support@invoxreply.com.

5. Plans, trial & billing

Paid plans are billed monthly or yearly through Stripe, in USD, EUR or BRL, with a 14-day free trial and no credit card required to start. Each plan includes a monthly volume of customer emails; additional emails are billed per unit at the rate shown on the pricing page. You can cancel at any time — access continues until the end of the paid period, with no cancellation fee.

6. Availability & liability

The service is provided on an "as is" basis. We work to keep it available and secure but do not guarantee uninterrupted operation. To the extent permitted by law, our liability is limited to the fees paid for the service in the prior three months.

7. Changes

We may update these terms; material changes will be reflected by the "Last updated" date above.