Privacy Policy

From merchants (you, if you run a Revio-powered store): your name, email, password (stored as a one-way hash, never in plain text), store name, and billing status. When you connect Shopify or Whop, we store the access credentials needed to sync orders and process payments. These are encrypted at rest.

From your customers (people who check out on your Revio-powered checkout): email address, name, shipping address, and phone number (if provided), so your order can be fulfilled and synced to Shopify. We do not collect or store full card numbers. Card details are entered directly into your connected Whop account's payment form, which we never see.

• To operate the checkout: resolving cart contents, calculating totals and tax, and creating the resulting order in your Shopify store.
• To process payments, by passing checkout details to your own connected Whop account.
• To bill merchants for Revio's own subscription fee and its per-order fee.
• To send transactional email (e.g. subscription renewal notices, dunning emails) via our email provider, Resend.
• To provide merchant support, via our chat provider, Crisp (only on pages a merchant is signed into their own dashboard. Never on the customer-facing checkout).
• To improve Revio and diagnose issues.

We share data with the following third parties, each strictly for the purpose below:

• Shopify: order and product data, to sync completed orders to your store.
• Whop: checkout and payment data, to process the actual transaction through your connected account.
• Resend: email address, to deliver transactional emails.
• Mapbox: the text you type into the delivery address field, only if a merchant has enabled address autocomplete, to suggest matching addresses. No address is sent unless a merchant has turned this on.
• Crisp: merchant email and store name, and the messages a merchant sends, only on dashboard pages, to power merchant support chat.
• Advertising pixels (Meta, Google, Triple Whale): if a merchant has connected their own ad accounts, checkout and purchase events (and a hashed version of the customer's email, for Meta) are sent to those platforms so the merchant can measure their own ad performance. This only happens for merchants who have explicitly configured a pixel.

We do not sell personal information to third parties.

We use a small number of cookies: one to keep you signed into your Revio dashboard, one (separate) to keep an operator signed into the admin panel, and, on the checkout page itself, a cookie that sticks a shopper to the same A/B-test checkout variant across page loads, if a merchant is running one. We do not use third-party advertising cookies of our own.

We retain merchant account data for as long as the account is active, and order/customer data for as long as needed to support order history, refunds, and legal/tax record-keeping requirements. If you close your Revio account, we will delete or anonymize personal data we no longer need to retain, subject to legal obligations to keep certain records.

Access credentials for your connected Shopify and Whop accounts are encrypted at rest. Passwords are hashed, never stored in plain text. We use industry-standard practices to protect data in transit (HTTPS) and restrict internal access to what's needed to operate the service.

Depending on where you're located, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. If you're in the EU/UK/EEA, these rights come from the GDPR/UK GDPR; if you're in California, from the CCPA. To exercise any of these rights, contact us using the details below. If you're a customer of a Revio-powered store (rather than a merchant), you can also contact that store directly, since they control your order.

We may update this Privacy Policy from time to time. We'll post the updated policy here with a new "Last updated" date.

Questions about this policy, or want to exercise a data-privacy right? Contact us at privacy@revio-checkout.com.