Privacy Policy

1. Overview

Revenic ("we", "us", or "our") operates revenic.io, an AI-powered analytics platform for ecommerce founders. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using Revenic, you agree to the collection and use of information in accordance with this policy. We take your privacy seriously and are committed to protecting your data.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name. This is used to authenticate you and deliver your Morning Brief.

Platform Data

When you connect your ecommerce channels (Shopify, Google Analytics, Klaviyo, Amazon, etc.), we access and store business performance data including:

• Sales revenue, order counts, and product data
• Website sessions and transaction data
• Email campaign performance metrics
• Advertising spend and performance
• Inventory levels

We do not access or store personally identifiable information (PII) about your customers — only aggregated business metrics.

Usage Data

We collect usage data to improve our service, including pages visited, features used, and session duration. This data is anonymized and aggregated.

3. How We Use Your Data

• Generate your personalized daily Morning Brief
• Detect anomalies and surface actionable insights
• Send you your daily brief via email (if enabled)
• Improve our AI models and recommendation quality
• Provide customer support
• Process billing and manage your subscription

We never sell your data to third parties. We never use your business data to train AI models shared with other customers.

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security enforced — meaning your data is only accessible by your account.

All API tokens and credentials for connected platforms are encrypted at rest using AES-256-GCM encryption before being stored in our database.

We retain your data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days.

5. Third-Party Services

We use the following third-party services to operate Revenic:

• Supabase — database and authentication (EU/US data centers)
• OpenAI — AI brief generation (data sent is anonymized business metrics only)
• Resend — email delivery for Morning Brief
• Vercel — hosting and infrastructure
• LemonSqueezy — payment processing and subscription management (we never store card details)

Each of these providers has their own privacy policies and are bound by data processing agreements.

6. Platform Integrations

When you connect a platform (e.g., Shopify, Klaviyo), you authorize Revenic to access data from that platform on your behalf. We only request the minimum permissions necessary to generate your brief. You can disconnect any platform at any time from your Channels settings, which immediately revokes our access.

7. Your Rights

You have the right to:

• Access all data we hold about you
• Export your data at any time
• Delete your account and all associated data
• Disconnect any connected platform at any time
• Opt out of email briefs while keeping your account active

For GDPR requests or data deletion, email us at privacy@revenic.io.

8. Cookies

We use essential cookies only — for session authentication. We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this policy as our service evolves. We will notify you of significant changes via email and update the "Last updated" date above. Continued use of Revenic after changes constitutes acceptance.

10. Contact

If you have questions about this Privacy Policy, contact us at:

Revenic
privacy@revenic.io
revenic.io