Last updated: July 8, 2026
We collect: (a) account information (email, name), (b) e-commerce data you sync from connected platforms, primarily Shopify (customer names, email addresses, order history, products), as well as Recharge subscription data where connected, (c) usage data (pages visited, features used), (d) API credentials for connected integrations (stored encrypted).
We use your data to: (a) provide the Service (AI analysis, campaign generation), (b) improve the Service, (c) send transactional emails (welcome, team invites, password reset). We do not sell your data.
Your e-commerce data is sent to Google Gemini API for analysis. This data is used solely for generating insights and is not retained by the AI provider beyond the request. We do not use your data to train AI models.
Your data is stored on Supabase (hosted in EU, eu-west-1). API credentials are encrypted at rest using AES-256-GCM. We use industry-standard security practices.
We use: Supabase (database, auth), Google Gemini (AI), Resend (transactional email), Vercel (hosting), Sentry (error tracking). Each processes data per their own privacy policies.
When you launch a campaign, the customer email addresses of the targeted segment are shared with the channels you choose: Klaviyo (to create the segment and send the campaign) and/or Meta (to build a custom audience, where Meta applies hashing per its Custom Audience terms). This only happens when you explicitly launch a campaign, and only for the segment you selected.
For the personal data of your store's customers, you (the merchant) are the data controller and Retainio acts as a data processor: we process this data only to provide the Service to you and never for our own purposes. We honor Shopify's GDPR webhooks: customer data requests, customer data erasure, and shop data erasure are processed automatically. Your customers' data is never sold, never used to train AI models, and never shared beyond the campaign launches you initiate.
We retain your data as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days.
You can: (a) export all your data from Settings, (b) delete your account and all data from Settings, (c) disconnect integrations at any time, (d) request information about your data by contacting us.
We use essential cookies for authentication and workspace selection. We do not use third-party tracking cookies or advertising trackers.
We may update this policy. We will notify users of material changes via email.
Contact: hello@retainio.xyz