Privacy Policy

VocaCommerce is operated by Strapnote Pvt. Ltd., a company registered in Nepal (registration no. 184927/078/079) with its office at House 12, Jhamsikhel Marg, Ward 2, Lalitpur 44700, Nepal.

This policy covers the platform at strapnote.com, tenant storefronts such as lumina.strapnote.com, and the shop-owner admin. Questions: privacy@strapnote.com.

We collect only what the product needs to run a store or complete an order:

• Shop owners: name, work email, password hash, store slug, branding, and catalog you upload.
• Shoppers: name, email, phone, shipping address, and order history when you check out.
• Voice shopping: microphone audio is processed in the browser to transcribe what you say. We send the transcript to the store assistant. We do not keep raw audio files after the session unless you stay in an open voice conversation.
• Payments: card numbers are typed on Stripe. We never see or store full card details. We keep Stripe session ids, invoice numbers, and order totals.
• Product photos: images you upload are stored with our image host so listings and try-on can run.

We use this data to host your tenant store, show live stock, take orders, send invoice emails, power the spoken assistant, and keep shop owners signed in. We do not sell personal data. We do not use voice transcripts to train public models.

Each shop is scoped to its own subdomain. Products, orders, and chats on lumina.strapnote.com are not mixed with another tenant.

We store an admin session token, cart contents, and chat preferences (including whether spoken replies are on) on your device. These are first-party and needed for the store to work. We do not run third-party advertising cookies.

We use these processors to run the platform:

• Stripe, Inc. — checkout and payment confirmation
• Cloudinary, Inc. — product and try-on images
• OpenRouter, Inc. — store assistant replies from live catalog
• Our SMTP provider — invoice and password-reset mail

They receive only what that job requires. Stripe’s privacy policy governs card data: stripe.com/privacy.

Shop-owner accounts and catalogs stay until the super admin closes the shop. Orders and invoices are kept for seven years for tax records in Nepal. Voice transcripts in an open chat stay on your device and on our servers for 30 days after the last message, then they are deleted. You can ask us to delete a shopper profile by emailing privacy@strapnote.com with the invoice number.

You can ask for a copy of your data, a correction, or deletion, subject to records we must keep for law. Write to privacy@strapnote.com. We aim to reply within 30 days. If you are in the EEA or UK, you may also contact your local data authority.

Strapnote Pvt. Ltd.
House 12, Jhamsikhel Marg, Ward 2
Lalitpur 44700, Nepal
privacy@strapnote.com · +977-1-5452180