Privacy Policy

Last updated 16 July 2026

Who we are

Leaf (“Leaf”, “we”, “us”) is a conversational customer-support service operated by Tealdroid LLP. Leaf helps online merchants answer their customers' questions across WhatsApp, Instagram, and Facebook Messenger by looking up information from the merchant's connected store and replying on their behalf. This policy explains what data we handle and why.

Data we process

When a merchant connects their accounts and a customer sends a message, we process:

Message content sent to a connected WhatsApp, Instagram, or Messenger account, and the reply we generate.
The customer's channel identifier — a phone number (WhatsApp) or platform-scoped user ID (Instagram/Messenger).
Order information from the merchant's connected Shopify store needed to answer a question — such as order status, fulfilment, and tracking. Where an order is looked up, we read the contact details on that order (name, email, phone) only to confirm the person asking is entitled to it.
Account and connection data for the merchant: store domain, connected channel identifiers, and the access tokens that authorize Leaf to act for them.

How we use it

We use this data solely to provide the service:

To understand a customer's question and generate a relevant reply.
To look up the specific order or information a question is about.
To verify that a customer is entitled to the order details they ask for, before revealing them.
To maintain the conversation so replies have context.

We do not sell personal data, use it for advertising, or use message content to train general-purpose AI models.

Service providers

Leaf shares data with a small number of processors, only as needed to run the service:

Meta Platforms — to receive and send messages on WhatsApp, Instagram, and Messenger.
Shopify — to read order and store information from the merchant's connected store.
Microsoft Azure — to host the service and to generate replies using Azure AI (OpenAI) language models.
Supabase — to store conversations and connection data.

Each provider processes data under its own terms and only for the purposes above.

Data retention

We keep conversation history and connection data for as long as the merchant's account is active, so the assistant can maintain context and the merchant can review past conversations. When a merchant disconnects a channel or uninstalls Leaf, the associated access tokens are revoked. You can request deletion of stored data at any time (see below).

Your rights and data deletion

Depending on where you live, you may have the right to access, correct, or delete personal data we hold, or to object to its processing.

To request deletion of data associated with you or your account, email support@tealdroid.com with the phone number or account the messages came from. We will delete the associated conversation data and confirm once done. Merchants can also remove their data by uninstalling Leaf and contacting us to erase stored records.

Security

Access tokens and customer data are stored in access-controlled systems and transmitted over encrypted connections. Access to production data is limited to what is required to operate the service.

Children

Leaf is a tool for businesses and is not directed at children. We do not knowingly collect data from children under 13 (or the minimum age in your jurisdiction).

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy or your data? Email support@tealdroid.com.