Revlo privacy policy

What Revlo stores

The settings you enter on Revlo's Settings page (your WhatsApp number, pre-filled message, greeting, and the button's text, position, color, and devices) are saved in your Shopify store as private app data (an app-data metafield). Your theme reads them to show the button. Only Revlo can read or change them, and Shopify deletes them when you uninstall the app.

When you install Revlo, Shopify issues the app an access token for your store. Revlo's own database stores:

• Your shop's myshopify.com domain
• The access token and refresh token Shopify issues to the app (with their expiry), used only to save and read your button settings
• Your chat button's last known setup state (whether it is turned on and whether a number is set) and its display options (position, distance from the bottom, color, and which devices it shows on), so the app can show your status the moment it opens
• The number of taps on your chat button per day, as plain counts with nothing about who tapped
• Whether you have hidden the setup guide or the note on the Settings page

That is everything. Revlo's database does not keep your WhatsApp number, your messages, or the names, email addresses, or any other personal information of you, your staff, or your customers.

What Revlo reads but does not store

To show whether the chat button is turned on, Revlo asks the Shopify admin (App Bridge) whether its app embed is active in your published theme. If the admin can't tell, Revlo may load your store's public homepage to check whether the button is present. Neither is stored or shared. Revlo never reads or changes your theme's files.

Shopify also sends Revlo notifications about your shop, for example when the app is uninstalled or your shop's details change. Revlo uses them only to keep the data above current or to delete it, and doesn't store their contents.

Your storefront and your customers

The chat button is a link to WhatsApp (wa.me) with your number and an optional pre-filled message. It loads nothing from Revlo or anyone else when a page opens, sets no cookies, and uses no browser storage.

When a customer taps the button, and only if they allow analytics in your store's privacy settings (Shopify's Customer Privacy API), the button sends one count to Revlo through your store's own address (Shopify's app proxy). The count carries no information about the customer. Shopify may add a customer ID to requests from logged-in customers; Revlo ignores it and doesn't store it. Revlo never knows who taps the button or what they write.

When a customer taps the button, WhatsApp opens and the conversation takes place in WhatsApp, between you and your customer. WhatsApp's own privacy policy applies to that conversation.

Data minimization and staff access

Revlo requests no access permissions: saving and reading its own app data needs none. It collects only the data listed above. It uses no third-party analytics, advertising, or tracking tools in the app or on your storefront; its only measurement is the daily tap count described above.

Access to Revlo's database is limited to the people who operate the app and is used only to keep it running and to answer support requests. Revlo staff do not access your Shopify admin unless you invite us as a collaborator for support, and that access ends when you remove it.

Where data is kept and who processes it

Revlo runs on Fly.io servers in the United States (New Jersey), on encrypted storage. Shopify provides the platform the app runs in. We don't sell, rent, or share your data with anyone else.

Retention and deletion

When you uninstall Revlo, Shopify notifies the app and Revlo immediately deletes everything it stores about your shop, including tap counts. Shopify also removes the chat button from your theme and deletes the app data that holds its settings. Shopify's shop data erasure request, sent 48 hours after uninstalling, deletes anything that remains.

Because Revlo stores no customer data, there is nothing to export or erase for customer data requests; Revlo still acknowledges Shopify's customer data request and erasure webhooks.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your data, and to object to or restrict its processing. To make a request, email menolab3@gmail.com. You can delete all Revlo data at any time by uninstalling the app.

Changes to this policy

If Revlo's data practices change, we will update this page and the date above before the change takes effect.

Contact

The Meno Lab, Attn: Revlo Privacy

1309 Coffeen Avenue, Sheridan, Wyoming 82801, United States

Email: menolab3@gmail.com