Privacy Policy — Relvello

Relvello provides merchandising, collection control, search and analytics for Shopify stores. This policy explains what information we collect, why, who we share it with, and the choices you have. "Relvello", "we" and "us" mean Relvello LLC.

1. Who this policy covers

This policy covers two groups of people, and our role differs for each:

Merchants and their team members who sign up for Relvello or use the dashboard. For this information, we decide how it is used and are responsible for it.
Shoppers who visit a Shopify store that uses Relvello. We process shopper information on behalf of that store, following the store's instructions. The store is responsible for its own privacy notice and for collecting any consent the law requires.

2. Information we collect

Account and team information

Your email address and a securely hashed password.
If you sign in with Google: your name, email address and profile image as provided by Google. We never receive your Google password.
Your organization's name, its members, their roles, and the email addresses you send invites to.
Messages you send us, such as support requests.

Waitlist

If you joined our waitlist before launch, we keep your email address and which page you signed up from so we can tell you Relvello is open. Ask us to delete it at any time.

Store information from Shopify

When you connect a Shopify store, we access it through Shopify's API with the permissions you approve. This includes:

Store details, such as your shop domain and settings, and the access token Shopify issues to us.
Catalog data: products, variants, collections, prices, images and inventory levels.
Sales and discount data: product sales totals, and active discounts and promotions.
Order data needed for attribution: order and checkout identifiers, line items, amounts, currency and order status.

Order notifications from Shopify can include customer contact details. We limit the fields Shopify sends where Shopify allows it, we do not use customer names, email addresses, phone numbers or street addresses, and we delete raw notification data within 30 days.

Storefront analytics

On stores that use Relvello, and only where the shopper has allowed analytics through the store's consent tools, we collect:

A pseudonymous browser identifier supplied by Shopify, which we store only in hashed form.
Product clicks, including which product was clicked, its position, and where it appeared (for example a collection page or search results).
Search terms entered into the store's search.
Product views, add-to-cart and checkout events, with their timestamps.
The page path where an event happened. We do not keep full URLs, query strings or referrers.
Checkout and order identifiers, so a purchase can be connected to an earlier click.

We do not use storefront analytics to identify shoppers by name, and we do not build profiles of shoppers across different stores.

Technical information

IP address, browser type and request details recorded in server logs, used for security, rate limiting and troubleshooting.
Cookies on relvello.com that are needed to keep you signed in and to protect forms against forgery. We do not use advertising cookies or third-party ad trackers.

3. How we use information

To provide the service: building merchandised collections, powering search, and producing analytics and attribution reports for your store.
To create and secure accounts: sign-in, email verification codes, password resets, and preventing abuse.
To run organizations and teams, including sending the invites you request.
To send service messages, such as security notices and important changes. We do not send marketing email without your permission, and you can unsubscribe from marketing at any time.
To support you when you contact us.
To maintain and improve Relvello, using aggregated or de-identified information where possible.
To comply with the law and enforce our Terms of Service.

Each store's data is kept separate and is used only to provide the service to that store. We do not sell personal information, and we do not use it for targeted advertising.

5. How long we keep information

Account and organization data: for as long as your account is active, then deleted within 30 days after you ask us to delete it.
Store data: deleted within 30 days after you uninstall Relvello from your store, or sooner when Shopify asks us to erase it.
Storefront analytics: click and checkout events for up to 90 days, which is the longest attribution window we support. Detailed shopping-journey events are kept for up to 7 days. Reports built from them contain totals, not shopper identifiers, and are kept while your account is active.
Raw order notifications from Shopify: up to 30 days.
Server logs: a short period, then deleted.

We may keep information longer where the law requires it, or to resolve disputes and enforce our agreements.

6. Security

We use encryption in transit (TLS), encrypt store access tokens at rest, restrict access to people who need it, and keep each store's data separated. No method of storage or transmission is completely secure. If we learn of a breach affecting your information, we will notify you as the law requires.

7. International transfers

We and our service providers process information in the United States and other countries where those providers operate, including on Cloudflare's global network. Where the law requires it, we use appropriate safeguards, such as standard contractual clauses, for these transfers.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. You can update most account details in your account settings, or email us at support@relvello.com. We will respond within the time the law requires, and we will not discriminate against you for using these rights.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you, our legitimate interests in running and securing the service, your consent where we ask for it, and compliance with legal obligations. You may also complain to your local data protection authority.

If you are a California resident: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

9. Shoppers on stores that use Relvello

If you shop on a store that uses Relvello and want to access or delete your information, please contact that store, because it controls that data. We act on requests the store passes to us, including customer data and deletion requests sent through Shopify. You can withdraw analytics consent at any time through the store's cookie or privacy controls.

10. Children

Relvello is a business service and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as Relvello changes. We will post the new version here and update the date at the top. If a change is material, we will notify account owners by email or in the dashboard before it takes effect.

12. Contact us

Relvello LLC
support@relvello.com