Last updated: November 8, 2026.
Storhand is a service published by Disayner Studio LLC, 6405 Saykally Rd St Ste 5763, Cheyenne, WY 82009, United States ("we", "us"). This page describes the data we process on the storhand.com website and in the Storhand app, why we process it and what your rights are.
Three categories of people: visitors to the storhand.com website, merchants who create a Storhand account, and visitors to online stores who chat with a Storhand assistant installed by a merchant.
The website offers a virtual assistant, Léo, which is the Storhand assistant itself. If you write to it, the content of the conversation and the page you are viewing are processed to answer you and kept for 90 days at most; a technical conversation identifier is stored in your browser to link your messages during your visit. If you do not write to it, no conversation is created.
The website sets no advertising cookies and uses no third-party tracking tools. If you fill in the contact form, we keep your name, your email address, your phone number if provided, your store's address and your message, for as long as it takes to answer you and for twelve months at most.
To create an account, we process your email address. If you choose to sign in with Google, we receive your email address and your profile name from Google, nothing else: we do not access your emails, your contacts or your files. We then process the information you enter about your store (website address, shipping and return policies, instructions given to the assistant), the public information read on your website to prepare the assistant, and the service usage data (conversations, requests passed on, technical costs). This data is used to provide the service, to bill it and to improve it.
Storhand mobile app (iOS and Android). It is for merchants who are already customers; no account can be created in it. Sign-in uses a six-digit code sent to your email address. To send you notifications (a customer asks to talk to someone, a sale is attributed, a customer replies during a conversation you took over), we store a notification identifier for your device, its system (iOS or Android) and its language. Notifications go through the Expo Push service, then Apple Push Notification service or Google's Firebase Cloud Messaging; they contain no message from your customers, the details open in the app. The identifier is deleted when you sign out, or after 90 days without using the app. The app does not access your location, contacts or photos, and contains no advertising or analytics tool.
When a visitor chats with a Storhand assistant on a merchant's store, we process on behalf of that merchant the content of the conversation, the page viewed, the cart contents, the browser's language and country, and, if the visitor writes them, their email address or phone number so that a person at the store can contact them again. If the store offers voice calls, the visitor's voice is processed in real time by ElevenLabs for speech recognition and synthesis: the audio is not recorded, the transcript is kept with the conversation and for 30 days at most at ElevenLabs. A person from the store can also take over the conversation and reply themselves; the widget then tells the visitor, and tells them again when the virtual assistant takes back over. The merchant is the data controller; Storhand acts as processor under a data processing agreement provided to every merchant. The assistant presents itself as a virtual assistant. Conversations are kept for 90 days at most, unless the merchant chooses a shorter setting.
The data is hosted in the European Union: database and authentication at Supabase (Frankfurt, Germany), application at Vercel (Frankfurt region), website and delivery network at Cloudflare. The assistant's answers are produced by Anthropic's models, which do not use conversations to train their models. Transactional emails are sent by Resend. Payments for subscriptions outside Shopify are processed by Whop. Two processing activities take place outside the European Union: voice calls, processed by ElevenLabs (United States), and the delivery of mobile app notifications, by Expo (United States) then Apple or Google. Each of these providers is bound by a data processing agreement.
Merchant account: for the duration of the contract, then 3 years for accounting obligations. Store conversations: 90 days at most. Technical logs: 30 days. Contact requests: 12 months at most.
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set directives on what happens to it after your death. To exercise these rights, write to contact@storhand.com. A merchant can request the export or deletion of their account and their store's data by writing to the same address, or from the mobile app (Settings, Delete my account); we act on it within the one-month period set by the GDPR. A store visitor should first contact the merchant concerned, who is the data controller; we pass on their request if it reaches us. You can also contact the CNIL (cnil.fr) or the supervisory authority of your country.
Encryption of exchanges, separation of data by store, restricted and logged access, access keys limited to each store and revocable. Merchant accounts have no password: sign-in uses a link or a six-digit code sent to your email address, or Google.
This page may change as the service evolves. The date at the top of the page shows the latest version; significant changes are announced to merchants by email.
