Legal

Privacy Policy

Last updated: November 8, 2026

1. Who we are

RevealShop.io ("RevealShop.io", "we", "our", or "us") is a software service independently operated from Montréal, Québec, Canada. RevealShop.io is not an incorporated entity; it is operated by its founder as a sole proprietorship. We provide Shopify store owners with AI-powered conversion analysis to help them understand and improve their online-store performance. This Privacy Policy describes how we collect, use, store, and protect information in accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union's General Data Protection Regulation (GDPR) and UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable international privacy frameworks. This policy also describes our compliance with Shopify's Protected Customer Data requirements (Level 2).

2. Scope

This policy applies to all users of RevealShop.io, including visitors to our website and Shopify merchants who connect their store to our platform. By using RevealShop.io, you agree to the practices described in this policy. If you are a merchant's customer (for example, someone who placed an order on a store using RevealShop.io), the merchant is the data controller of your personal data; RevealShop.io acts as a data processor on the merchant's behalf in accordance with this policy and our Data Processing Agreement (available on request).

3. What data we access and collect

When you install RevealShop.io on your Shopify store, we are granted read-only OAuth access to the following Shopify API scopes: read_analytics, read_customers, read_orders, read_reports, read_products, read_online_store_pages. Product and page access is used to name your products and pages in your recommendations. The data accessed falls into two categories:

A. Data we access in transit (via the Shopify API):

• Aggregate store metrics: session counts, orders, net sales, abandoned checkouts, checkout abandonment rate, average order value, refund rate, returning customer rate, cart aging, top-selling products, peak purchase hours
• Individual order records — required by the Shopify API to compute the aggregate metrics listed above
• Abandoned checkout records — required to compute checkout abandonment statistics
• Customer records — required by the Shopify API to compute returning-customer rate

B. Data we store persistently:

• Your Shopify store domain
• Your Shopify OAuth access token (expiring; encrypted at rest) and refresh token
• Aggregated numeric metrics computed from your store's API responses (sessions, orders, net sales, AOV, conversion rate, etc.)
• Analysis results and recommendations generated for your store
• The ideas, actions and results generated for your store, including which actions you started, skipped or completed, with before-and-after aggregate metrics
• Your store's name and contact email as provided by Shopify, and the email address you choose for the weekly email
• Technical data such as browser type and approximate IP-derived location for security and service performance

The distinction between (A) and (B) is critical: data we access in transit is significantly broader than the data we store. See Section 4 for how customer personal data specifically is handled.

4. Shopify Protected Customer Data (Level 2)

Shopify classifies certain fields as Protected Customer Data. RevealShop.io is approved at Level 2 for the following customer fields: name, email, phone, and address. We requested this access because Shopify's orders and customers GraphQL types return these fields within order records; access is required for the API to return any customer-linked object, including the aggregate analytics we compute.

How RevealShop.io actually handles these fields:

• Never displayed. Customer names, emails, phone numbers, and addresses are never shown in the RevealShop.io dashboard. The interface shows only aggregate counts, totals, and rates.
• Never stored. When order or customer records are returned by the Shopify API, our backend reads only the fields required for aggregate computation (counts, order totals, timestamps) and discards the rest in memory. No customer personal fields are written to logs, databases, or backups.
• Never used for AI analysis. The data sent to our AI provider (see Section 7) consists exclusively of aggregated numbers, not of any individual customer record.
• Never sold, shared, or disclosed to any third party.

We also do not collect:

• Payment card numbers, bank details, or any financial credentials
• Merchant passwords or login credentials
• Sensitive personal data categories as defined under GDPR Article 9
• Any data that would require our app to write to, modify, or alter your store

RevealShop.io requires read-only API scopes and is technically incapable of making any change to your store.

5. Legal basis for processing (GDPR / UK GDPR)

For merchants in the European Economic Area, the United Kingdom, and Switzerland, we process data under the following legal bases:

• Contractual necessity (Art. 6(1)(b)) — processing is required to deliver the RevealShop.io service you have requested
• Legitimate interests (Art. 6(1)(f)) — maintaining, securing, and improving our platform; protecting against fraud and abuse
• Consent (Art. 6(1)(a)) — for any processing you have explicitly opted into, such as marketing communications; you may withdraw consent at any time
• Legal obligation (Art. 6(1)(c)) — where processing is required to comply with a legal obligation

6. How we use your data

Your store data is used exclusively to generate conversion insights and recommendations for you. Specifically, we use the data to:

• Compute aggregate store metrics (conversion rate, AOV, abandonment rate, revenue per visitor, etc.)
• Generate AI-powered ideas and actions tailored to your store
• Display your analysis and action history inside the app
• Send you a weekly email with your store's numbers and this week's action. You can choose the address, turn the email off in the app, or unsubscribe with one click from any email
• Maintain, secure, and improve the quality of the service
• Communicate service updates, billing information, and support responses

We do not sell, rent, share for advertising, or otherwise use your data outside the purposes listed above. We do not use your store data to train AI models.

7. AI and automated processing

RevealShop.io uses large language models provided by Anthropic (specifically, the Claude API) to generate the plain-English analysis and recommendations you see in the dashboard. To produce these recommendations, we send Anthropic only the aggregate numeric metrics computed from your store, together with product and page names — we do not send individual customer records, names, emails, phone numbers, or addresses.

Anthropic acts as our sub-processor for this task. Under our agreement with Anthropic, your data is not used to train Anthropic's models. Data sent to Anthropic is retained only for the short period required to return a response, in accordance with Anthropic's enterprise data processing terms.

Automated decision-making: RevealShop.io's AI output is advisory — it produces recommendations for you, the merchant, to review. It does not make automated decisions that produce legal or similarly significant effects on you or your customers. If you object to automated processing of your data, you may uninstall the app from your Shopify admin at any time.

8. Sub-processors

RevealShop.io relies on the following sub-processors to deliver the service. Each is contractually bound to data protection terms equivalent to this policy:

• Shopify Inc. — authentication and source of merchant store data (read-only API access).
• Anthropic PBC — AI analysis of aggregate metrics (no individual customer data sent). Processing location: United States.
• Render Services Inc. — hosting for our analysis server, which computes your store metrics. Processing location: United States.
• Gadget Software Inc. — hosting, database and Shopify connection for the RevealShop.io app. Processing location: United States.
• Sendinblue SAS (Brevo) — delivery of the weekly email (recipient address and email content). Processing location: European Union.
• Cloudflare, Inc. — hosting and security of the revealshop.io website. Processing location: Cloudflare's global network.
• Porkbun LLC — domain registration and transactional email routing.
• Formspree Inc. — handling of contact-form and early-access-list submissions.
• Shopify Billing API — subscription billing (operated by Shopify; no separate payment processor is used by RevealShop.io).

We do not use Stripe, PayPal, or any other third-party payment processor. We do not use advertising networks, third-party analytics platforms, or data brokers. A current list of sub-processors is maintained at this page and will be updated whenever it changes.

9. Data retention

• Access tokens: retained for the duration of the installation. Access tokens expire on Shopify's schedule and are rotated automatically; expired tokens are purged.
• Aggregate metrics and analysis results: retained for as long as your account is active, so you can track trends over time. Earlier aggregate snapshots may be summarized or purged if no longer needed for trend analysis.
• Customer personal data (name, email, phone, address): not retained. Processed in memory in transit only; discarded after aggregate computation.
• Account metadata (shop domain, plan, settings): retained while your account is active.
• Support communications: retained for up to 24 months from last contact, for service continuity and legal record-keeping.

On account closure (uninstall or explicit deletion request), all data associated with your store is permanently deleted from our active systems within 30 days, and from encrypted backups within the normal backup-rotation window (no more than 90 days from deletion).

10. Data deletion

You can request permanent deletion of all your data at any time, through any of the following channels:

• Uninstall the app from your Shopify admin (we honour Shopify's app/uninstalled webhook as a deletion signal)
• Email privacy@revealshop.io with a deletion request
• Submit a request via our contact form

We also comply with Shopify's mandatory privacy webhooks: customers/data_request, customers/redact, and shop/redact. Because we do not store customer personal data, responses to customers/redact and customers/data_request confirm that no such data is held.

11. Data security

RevealShop.io implements technical and organizational measures meeting Shopify's Level 1 and Level 2 Protected Customer Data requirements:

• Encryption in transit: all communications between RevealShop.io, Shopify, merchants, and sub-processors use TLS (HTTPS).
• Encryption at rest: application data is encrypted at rest at both the database and hosting-provider layer. Access tokens are stored as encrypted fields.
• Encrypted backups: backups of application data are encrypted and access-controlled.
• Separation of environments: development, test, and production environments are strictly separated. Test data never contains production merchant or customer personal data.
• Least-privilege access: access to production systems and data is limited to authorized personnel, using strong unique passwords and, where available, multi-factor authentication.
• Access logs: access to production systems is logged; logs are retained and reviewed for anomalous activity.
• Data loss prevention: our data minimization approach — not storing customer personal fields and processing only aggregate metrics — is itself our primary DLP control. Additional technical controls include scoped API tokens and no public API exposure of protected data.
• Security incident response: we maintain an incident response policy with defined severity levels, escalation paths, and merchant notification obligations. Where required by law, affected parties and regulators are notified within applicable timelines (for GDPR, within 72 hours of becoming aware of a qualifying breach).
• Vendor security: every sub-processor is evaluated for their own security and data-protection posture before integration.

No system is completely immune to risk, but we take all reasonable steps to safeguard your information and continuously improve our controls.

12. International data transfers

RevealShop.io is operated from Canada. Some of our sub-processors (Anthropic, Render, Gadget, Cloudflare) process data in the United States, and your data may be transferred to and processed there. Where data is transferred out of the EEA, the UK, or Switzerland:

• Transfers to Canada rely on the European Commission's adequacy decision for Canada's PIPEDA framework.
• Transfers to the United States rely on appropriate safeguards, including the EU–US Data Privacy Framework (where our sub-processor participates) and/or Standard Contractual Clauses incorporated into our agreements with them.

You may request a copy of the transfer safeguards in place by emailing privacy@revealshop.io.

13. Your rights (GDPR, UK GDPR, PIPEDA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your account and all associated data
• Right to restriction — request that we limit processing of your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time
• Right to lodge a complaint — with your local data protection authority

To exercise any of these rights, email privacy@revealshop.io. We will respond within 30 days (extendable by a further 60 days for complex requests, with notice).

14. California and US state privacy rights

If you are a resident of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Indiana, Kentucky, Rhode Island, or another US state with a comprehensive privacy law, you have the following rights:

• Right to know what personal information we collect, use, disclose, and (if applicable) sell or share
• Right to delete personal information we have collected
• Right to correct inaccurate personal information
• Right to data portability
• Right to opt out of the sale or sharing of personal information, and of targeted advertising
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising any of the above rights

We do not sell or share personal information as those terms are defined under the CCPA/CPRA or any similar US state law. We do not process personal information for cross-context behavioral advertising. There is therefore no opt-out mechanism required, but if our practices ever change, this policy will be updated and a clear opt-out will be provided.

To exercise any right, email privacy@revealshop.io. Authorized agents submitting a request on your behalf must provide proof of authorization.

15. Cookies

RevealShop.io uses only strictly necessary cookies required for the platform to function. We do not use tracking, advertising, or third-party analytics cookies. See our Cookie Policy for details.

16. Children's privacy

RevealShop.io is a business-to-business service for Shopify merchants. It is not directed at children and is not intended for anyone under the age of 16 (or the equivalent minimum age in your jurisdiction — 13 under COPPA in the US). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact privacy@revealshop.io and we will delete it promptly.

17. Changes to this policy

We may update this policy to reflect changes in our practices, sub-processors, or applicable laws. The date at the top of this page reflects the most recent update. We will notify active users of material changes via email or in-app notice before changes take effect. Continued use of RevealShop.io after changes take effect constitutes acceptance of the updated policy.

18. Contact

General questions: contact@revealshop.io or via our contact form.

Privacy, data-access, and data-deletion requests: privacy@revealshop.io.

Postal: RevealShop.io, Montréal, Québec, Canada (specific address provided on request to verified rights-holders).